CVE-2024-39125

MEDIUM CVSS: 5.4 Published: 2024-07-17 Modified: 2026-06-17

Description

Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.

Affected Platforms

Roundup-Tracker Roundup

Weakness Type

CWE-79, CWE-79

References