CVE-2012-6133: Roundup-Tracker Roundup

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.

Affected products

• Roundup-Tracker Roundup: before 1.4.20 (fixed in 1.4.20)

Published 2020-01-30. Last modified 2026-06-16.