CVE-2024-39124: Roundup-Tracker Roundup

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS.

Affected products

• Roundup-Tracker Roundup: before 2.4.0 (fixed in 2.4.0)

Published 2024-07-17. Last modified 2026-06-17.