Description

Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-5502

Related Vulnerabilities

WordPress Plugin demon image annotation Cross-Site Request Forgery (4.7)

Moodle Other Vulnerability (CVE-2015-3175)

WordPress Plugin s2Member Pro 'Coupon Code' Field HTML Injection (111216)

WordPress Plugin Crayon Syntax Highlighter Local File Disclosure (2.6.10)

phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-0792)

Severity

Low

Classification

CVE-2012-5502 CWE-707

Tags

Missing Update Known Vulnerabilities