Description
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
Remediation
References
Related Vulnerabilities
XWiki Improper Access Control Vulnerability (CVE-2023-29513)
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-2397)
MySQL CVE-2020-2930 Vulnerability (CVE-2020-2930)
Apache HTTP Server Improper Handling of Case Sensitivity Vulnerability (CVE-2001-0766)
Oracle Application Server CVE-2002-1637 Vulnerability (CVE-2002-1637)