Description

Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Remediation

References

CVE-2011-1948

Related Vulnerabilities

PHP Other Vulnerability (CVE-2007-1583)

Dolphin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-4333)

PHP POST file upload buffer overflow vulnerabilities

WordPress Plugin Itinerary Cross-Site Scripting (1.0.0)

Drupal Improper Input Validation Vulnerability (CVE-2017-6921)

Severity

Medium

Classification

CVE-2011-1948 CWE-707

Tags

Missing Update Known Vulnerabilities