2024-07-17 00:00:00
mitre
PUBLISHED
Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.