Description

Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.

Remediation

References

CVE-2010-1104

Related Vulnerabilities

WordPress Plugin Premmerce Permalink Manager for WooCommerce Local File Inclusion (2.3.10)

WordPress Plugin AccessPress Social Counter Cross-Site Scripting (1.3.6)

OpenSSL Resource Management Errors Vulnerability (CVE-2012-0050)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14166)

PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4662)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2010-1104