Description

Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-5490

Related Vulnerabilities

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29512)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.5)

WordPress Plugin Recip.ly 'uploadImage.php' Arbitrary File Upload (1.1.7)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15700)

Python Other Vulnerability (CVE-2012-2135)

Severity

Medium

Classification

CVE-2012-5490 CWE-707

Tags

Missing Update Known Vulnerabilities