PT-2011-3492
CVE-2011-1949
·
تاريخ النشر
2011-06-06
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 4.0
5.1
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions
Plone versions 2.1 through 4.1
Description
A cross-site scripting (XSS) issue exists in the safe html filter in Products.PortalTransforms, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Recommendations
For Plone versions 2.1 through 4.1, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾