Description
Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the (1) browser_id_manager or (2) OFS.Image method.
Remediation
References
Related Vulnerabilities
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.15)
Oracle JRE CVE-2017-10348 Vulnerability (CVE-2017-10348)
Oracle Database Server CVE-2008-1813 Vulnerability (CVE-2008-1813)
WordPress Plugin Web Tripwire Arbitrary File Upload (0.1.1)
Seo Panel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-22643)