Description

Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-5490

Related Vulnerabilities

MySQL CVE-2015-0508 Vulnerability (CVE-2015-0508)

WordPress Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2022-3590)

Python Improper Privilege Management Vulnerability (CVE-2020-29396)

PHP Other Vulnerability (CVE-2015-4599)

WordPress Plugin WP Meta and Date Remover Cross-Site Request Forgery (1.7.5)

Severity

Medium

Classification

CVE-2012-5490 CWE-707

Tags

Missing Update Known Vulnerabilities