CVE-2012-6130

Name of the Vulnerable Software and Affected Versions Roundup versions prior to 1.4.20

Description A cross-site scripting (XSS) issue exists in the history display of Roundup, allowing remote attackers to inject arbitrary web script or HTML via a username. This occurs when generating a link.

Recommendations For versions prior to 1.4.20, update to version 1.4.20 or later to resolve the issue. As a temporary workaround, consider restricting user input for username fields to minimize the risk of exploitation.