Description

Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.

Remediation

References

CVE-2021-33507

Related Vulnerabilities

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Unspecified Vulnerability (2.4.9)

WordPress Plugin Database Backup for WordPress 'edit.php' Directory Traversal (1.7)

WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5)

MySQL CVE-2016-0639 Vulnerability (CVE-2016-0639)

MySQL Improper Input Validation Vulnerability (CVE-2009-4028)

Severity

Medium

Classification

CVE-2021-33507 CWE-707

Tags

Missing Update Known Vulnerabilities