PloneFormGen is prone to an arbitrary code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code within the context of the application. PloneFormGen 1.7.4 through 1.7.8 are vulnerable other versions may also be affected.

Updates are available. Please see the references or vendor advisory for more information.

• http://plone.org/
• http://www.securityfocus.com/bid/60247

---

Updated on 2015-03-25