PYSEC-2020-218

Multiple cross-site scripting XSS vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the 1 browseridmanager or 2...

PT-2020-7569

Name of the Vulnerable Software and Affected Versions: Plone versions 3.3.x through 3.3.6 Plone versions 4.0.x through 4.0.9 Plone versions 4.1.x through 4.1.6 Plone versions 4.2.x through 4.2.7 Plone versions 4.3 through 4.3.2 Description: The issue allows remote attackers to inject arbitrary we...