| Package | Affected versions | Patched versions |
|---|---|---|
| roundup | < 2.0.0< 2.0.0alpha0 | 2.0.02.0.0alpha0 |
| roundup | = 1.6 |
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free