CVE-2013-4190

Plone 2.1-4.1, 4.2.x-4.2.5, 4.3.x-4.3.1 - Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (4)

Core 4
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=978451
Mailing List mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2013/q3/261

Scores

EPSS 0.0181
EPSS Percentile 76.3%

Details

CWE
CWE-79
Status published
Products (50)
plone/plone 4.2
plone/plone 4.2.1
plone/plone 4.2.2
plone/plone 4.2.3
plone/plone 4.2.4
plone/plone 4.2.5
plone/plone 4.3
plone/plone 4.3.1
plone/plone 2.1
plone/plone 2.1.1
... and 40 more
Published Mar 11, 2014
Tracked Since Feb 18, 2026