Description
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
Remediation
References
Related Vulnerabilities
Pega Infinity Improper Privilege Management Vulnerability (CVE-2020-15390)
PHP Improper Input Validation Vulnerability (CVE-2014-3487)
Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2022-42130)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29509)
IBM RTC Incorrect Authorization Vulnerability (CVE-2017-1700)