Description

Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.

Remediation

References

CVE-2011-1340

Related Vulnerabilities

Oracle JRE CVE-2023-22006 Vulnerability (CVE-2023-22006)

Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)

Lighttpd Out-of-bounds Write Vulnerability (CVE-2022-22707)

Joomla Missing Authorization Vulnerability (CVE-2019-18674)

WordPress Configuration Vulnerability (CVE-2013-2205)

Severity

Medium

Classification

CVE-2011-1340 CWE-707

Tags

Missing Update Known Vulnerabilities