CVE-2013-4190
CVE-2013-4190 : Multiple XSS vulnerabilities in Plone components (spamProtect.py, pts.py, request.py) affect Plone 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. The root cause is unsanitized input allowing injection of arbitrary script/HTML via unspecified vectors. Corresponding advisories indicate a ho...