Description
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
References (8)
Core 8
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44775
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/48005
Patch, Vendor Advisory x_refsource_confirm
http://plone.org/products/plone/security/advisories/CVE-2011-1948
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/72727
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44776
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/8269
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67693
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/518155/100/0/threaded
Scores
EPSS
0.0237
EPSS Percentile
82.0%
Details
CWE
CWE-79
Status
published
Products (50)
plone/plone
1.0
plone/plone
1.0.1
plone/plone
1.0.2
plone/plone
1.0.3
plone/plone
1.0.4
plone/plone
1.0.5
plone/plone
1.0.6
plone/plone
2.0
plone/plone
2.0.1
plone/plone
2.0.2
... and 40 more
Published
Jun 06, 2011
Tracked Since
Feb 18, 2026