Lucene search
GoogleOSV:PYSEC-2018-71HistoryJan 03, 2018 - 6:29 p.m.
PYSEC-2018-71
2018-01-0318:29:00
Google
osv.dev
7
0.001 Low
EPSS
Percentile
22.9%
A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.
Related
osv
osv
CVE-2017-1000482
2018-01-03 18:29:00
Products.CMFPlone XSS in profile home_page property
2022-05-14 03:49:57
redhatcve
redhatcve
CVE-2017-1000482
2018-01-09 05:50:33
prion
prion
Code injection
2018-01-03 18:29:00
veracode
veracode
Cross-site Scripting (XSS)
2018-01-03 23:29:46
nvd
nvd
CVE-2017-1000482
2018-01-03 18:29:00
cvelist
cvelist
CVE-2017-1000482
2022-10-03 16:23:10
cve
cve
CVE-2017-1000482
2022-10-03 16:23:10
github
github
Products.CMFPlone XSS in profile home_page property
2022-05-14 03:49:57
nessus
nessus
RHEL 5 : conga (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 5 : plone (Unpatched Vulnerability)
2024-05-11 00:00:00