CVE-2011-1949
Plone 2.1-4.1 - Authenticated Cross-Site Scripting via Safe HTML Filter
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/72728
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44775
Patch, Vendor Advisory x_refsource_confirm
http://plone.org/products/plone/security/advisories/CVE-2011-1949
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/48005
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44776
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/8269
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67694
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/518155/100/0/threaded
Scores
EPSS
0.0126
EPSS Percentile
66.5%
Details
CWE
CWE-79
Status
published
Products (45)
plone/plone
2.1
plone/plone
2.1.1
plone/plone
2.1.2
plone/plone
2.1.3
plone/plone
2.1.4
plone/plone
2.5
plone/plone
2.5.1
plone/plone
2.5.2
plone/plone
2.5.3
plone/plone
2.5.4
... and 35 more
Published
Jun 06, 2011
Tracked Since
Feb 18, 2026