Description

Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Remediation

References

CVE-2016-7139

Related Vulnerabilities

WordPress Plugin A. Gallery TimThumb Arbitrary File Upload (0.9rev378511)

WordPress Plugin Google XML Sitemaps Cross-Site Scripting (4.0.9)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5651)

WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.7)

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (2.3.6)

Severity

Medium

Classification

CVE-2016-7139 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities