Description

Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "{u,}translate."

Remediation

References

CVE-2012-5494

Related Vulnerabilities

XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-29204)

MySQL CVE-2022-21485 Vulnerability (CVE-2022-21485)

WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-5611)

WordPress Plugin WP Job Manager Cross-Site Scripting (1.26.1)

WordPress Plugin WP SVG images Cross-Site Scripting (3.3)

Severity

Medium

Classification

CVE-2012-5494 CWE-707

Tags

Missing Update Known Vulnerabilities