Description

Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.

Remediation

References

CVE-2010-2422

Related Vulnerabilities

WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-0819)

WordPress Plugin Car Demon Multiple Vulnerabilities (1.7.97)

WordPress Plugin MM Duplicate 'index.php' SQL Injection (1.2)

WordPress Plugin Woocommerce Products Price Bulk Edit Cross-Site Scripting (2.2.0)

Severity

Medium

Classification

CVE-2010-2422 CWE-707

Tags

Missing Update Known Vulnerabilities