Cross-Site Scripting Vulnerability in Roundup by Metaverse Software
CVE-2010-2491

Currently unrated

Key Information:

Vendor: Roundup-tracker
Status: Roundup
Vendor: CVE Published:; 24 September 2010

🔔 Create Roundup-tracker Vulnerability Alert

What is CVE-2010-2491?

A Cross-Site Scripting (XSS) vulnerability exists in the cgi/client.py file of Roundup prior to version 1.4.14. This flaw enables remote attackers to execute arbitrary web scripts or HTML content by manipulating the template argument in the /issue program. When exploited, this vulnerability can lead to unauthorized script execution in the context of the user’s session. It is critical for users and administrators to update their versions of Roundup to mitigate potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch