Lucene search

K
osvGoogleOSV:GHSA-CVWC-G7FW-7XRJ
HistoryMay 17, 2022 - 5:40 a.m.

Plone XSS Vulnerability

2022-05-1705:40:10
Google
osv.dev
4

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

Related for OSV:GHSA-CVWC-G7FW-7XRJ