Description

Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.

Remediation

References

CVE-2010-2422

Related Vulnerabilities

WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-12895)

WordPress Plugin Theme Test Drive Multiple Vulnerabilities (2.9)

Joomla! Core 2.5.x Cross-Site Scripting (2.5.0 - 2.5.9)

MediaWiki Missing Authorization Vulnerability (CVE-2021-30155)

WordPress Plugin WP SMS Cross-Site Scripting (5.4.12)

Severity

Medium

Classification

CVE-2010-2422 CWE-707

Tags

Missing Update Known Vulnerabilities