PYSEC-2010-19

vendorUSosv

view advisory published 2010-06-24Licence: CC-BY-4.0

Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2010-2422US	medium4.3	1.97% (80th)	—	2010-06-24
Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via th…

references

External citations — patches, advisories, analysis.

http://plone.org/products/plone/security/advisories/cve-2010-unassigned-html-injection-in-safe_htmlADVISORY
http://secunia.com/advisories/40270ADVISORY
http://www.securityfocus.com/bid/40999WEB
https://github.com/advisories/GHSA-qj7x-wm9q-qjx8ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan