Description
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.
Remediation
References
Related Vulnerabilities
Jenkins Protection Mechanism Failure Vulnerability (CVE-2021-21696 )
WordPress Plugin WPtouch Security Bypass (3.4.2)
WordPress Plugin UpdraftPlus WordPress Backup Security Bypass (1.22.1)
Oracle JRE CVE-2013-0448 Vulnerability (CVE-2013-0448)
WordPress Plugin WP Frontend Profile Security Bypass (1.2.1)