Cross-site Scripting (XSS) vulnerability in cgi/client.py
in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action
parameter to support/issue1
.
{ "nvd_published_at": "2014-04-11T15:55:00Z", "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-04-30T08:39:20Z" }