Description

Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "{u,}translate."

Remediation

References

CVE-2012-5494

Related Vulnerabilities

WordPress Plugin Jigoshop-Store Toolkit Privilege Escalation (1.3.8)

WordPress Plugin World of Warcraft-Armory Table Cross-Site Scripting (0.2.5)

Oracle Database Server CVE-2006-1876 Vulnerability (CVE-2006-1876)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.33)

WordPress Plugin Coming Soon Page & Maintenance Mode Cross-Site Request Forgery (1.7.8)

Severity

Medium

Classification

CVE-2012-5494 CWE-707

Tags

Missing Update Known Vulnerabilities