Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2013-4190

Related Vulnerabilities

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-7134)

WordPress Plugin Dokan-Best WooCommerce Multivendor Marketplace Solution-Build Your Own Amazon, eBay, Etsy Cross-Site Request Forgery (3.2.0)

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-0327)

Oracle JRE CVE-2013-5809 Vulnerability (CVE-2013-5809)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.9.1.1)

Severity

Medium

Classification

CVE-2013-4190 CWE-707

Tags

Missing Update Known Vulnerabilities