CVE-2012-6130

Published: Apr 11, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.

Affected (20)

Products: Roundup Tracker: Roundup

Roundup Tracker

1 product

Roundup

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Roundup Tracker Roundup	Up to 1.4.19
Roundup Tracker Roundup	Version 1.4.0
Roundup Tracker Roundup	Version 1.4.10
Roundup Tracker Roundup	Version 1.4.11
Roundup Tracker Roundup	Version 1.4.12
Roundup Tracker Roundup	Version 1.4.13
Roundup Tracker Roundup	Version 1.4.14
Roundup Tracker Roundup	Version 1.4.15
Roundup Tracker Roundup	Version 1.4.16
Roundup Tracker Roundup	Version 1.4.17
Roundup Tracker Roundup	Version 1.4.18
Roundup Tracker Roundup	Version 1.4.1
Roundup Tracker Roundup	Version 1.4.2
Roundup Tracker Roundup	Version 1.4.3
Roundup Tracker Roundup	Version 1.4.4
Roundup Tracker Roundup	Version 1.4.5
Roundup Tracker Roundup	Version 1.4.6
Roundup Tracker Roundup	Version 1.4.7
Roundup Tracker Roundup	Version 1.4.8
Roundup Tracker Roundup	Version 1.4.9