Description
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.
Remediation
References
Related Vulnerabilities
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2729)
WordPress Plugin Responsive Slider-Image Slider-Slideshow for WordPress SQL Injection (2.6.8)
WordPress Plugin Candidate Application Form Arbitrary File Disclosure (1.6)
WordPress Plugin FreeMind WP Browser Cross-Site Request Forgery (1.2)
WordPress Plugin WP Lead Management Cross-Site Scripting (3.0.0)