Listen to this Post
Roundup versions before 2.5.0 are vulnerable to stored Cross-Site Scripting (XSS) due to insufficient input sanitization in issue tracker templates (devel and responsive). When a malicious URL is processed within these templates, JavaScript code can be injected and executed in the context of a victim’s browser. This occurs because user-supplied input is rendered without proper escaping, allowing attackers to craft payloads that persist in the system. The vulnerability is triggered when a user views an issue containing the malicious link, leading to arbitrary script execution.
DailyCVE Form
Platform: Roundup
Version: <2.5.0
Vulnerability: XSS
Severity: Moderate
Date: Jul 13, 2025
Prediction: Patch by Aug 2025
What Undercode Say
Check Roundup version
roundup-admin --version
Example malicious payload
<script>alert('XSS')</script>
Sanitization bypass test
http://victim-site/issue?name=<img src=x onerror=alert(1)>
How Exploit
- Attacker injects malicious script via issue tracker.
- Victim views compromised issue, triggering XSS.
- Session hijacking or phishing possible.
Protection from this CVE
- Upgrade to Roundup 2.5.0+.
- Sanitize user inputs in templates.
- Implement CSP headers.
Impact
- Unauthorized script execution.
- Session theft.
- Data manipulation.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
