EUVD-2017-0086

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cross-site scripting vulnerability in Plone versions from 3.3.0 to 5.0rc1 identified.

Reporter	Title	Published	Views	Family All 12
CNVD	Plone Cross-Site Scripting Vulnerability	26 Sep 201700:00	–	cnvd
CVE	CVE-2015-7316	25 Sep 201717:00	–	cve
Cvelist	CVE-2015-7316	25 Sep 201717:00	–	cvelist
Github Security Blog	Plone Cross-site Scripting Vulnerability	17 May 202200:36	–	github
NVD	CVE-2015-7316	25 Sep 201717:29	–	nvd
OSV	GHSA-VF8G-M3VQ-6P4P Plone Cross-site Scripting Vulnerability	17 May 202200:36	–	osv
OSV	PYSEC-2017-53	25 Sep 201717:29	–	osv
Prion	Cross site scripting	25 Sep 201717:29	–	prion
PyPA	PYSEC-2017-53	25 Sep 201717:29	–	pypa
Tenable Nessus	RHEL 5 : luci (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "1564501a-8511-3c80-8257-874bcb106343",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "cbc948a1-66db-3291-b2c4-5eea5ebd132e",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
plone	www.plone.org/security/hotfix/20150910/non-persistent-xss-in-plone
github	www.github.com/plone/Products.CMFPlone/commit/3da710a2cd68587f0bf34f2e7ea1167d6eeee087
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2015/09/22/14
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-7316
github	www.github.com/plone/Plone
github	www.github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-53.yaml
pypi	www.pypi.org/project/Products.PloneHotfix20150910
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 36.1

CVSS 24.3

EPSS0.0051