Description

Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.

Remediation

References

CVE-2011-1949

Related Vulnerabilities

Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-7859)

Squid NULL Pointer Dereference Vulnerability (CVE-2018-1172)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.3)

CKEditor Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-26272)

WordPress Plugin Request Quote via Whatsapp for Woocommerce Cross-Site Scripting (1.0.1)

Severity

Low

Classification

CVE-2011-1949 CWE-707

Tags

Missing Update Known Vulnerabilities