Description

Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Remediation

References

CVE-2011-1948

Related Vulnerabilities

WordPress Plugin Rich Reviews Cross-Site Scripting (1.7.4)

ProjectSend Incorrect Authorization Vulnerability (CVE-2021-40884)

WordPress Plugin Watu Quiz Cross-Site Scripting (2.4.9)

WordPress Plugin LeagueManager Multiple SQL Injection Vulnerabilities (3.9.1.1)

WordPress Plugin Airtight Security & Features Formerly Redirect Editor And Security Unspecified Vulnerability (1.3)

Severity

Medium

Classification

CVE-2011-1948 CWE-707

Tags

Missing Update Known Vulnerabilities