CVE-2024-39125

{"id": "CVE-2024-39125", "cveTags": [], "metrics": {}, "published": "2024-07-17T20:15:06.270", "references": [{"url": "https://www.roundup-tracker.org", "source": "cve@mitre.org"}, {"url": "https://www.roundup-tracker.org/docs/security.html#cve-announcements", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header."}, {"lang": "es", "value": "Roundup anterior a 2.4.0 permite XSS a trav\u00e9s de un elemento SCRIPT en un encabezado HTTP Referer."}], "lastModified": "2024-07-18T12:28:43.707", "sourceIdentifier": "cve@mitre.org"}