2 matches found
CVE-2017-1000482
A member of the Plone 2.5-5.1rc1 site could set javascript in the homepage property of his profile, and have this executed when a visitor click the home page link on the author page...
5.4CVSS1.2AI score0.00565EPSS
SaveExploits0References1
CVE-2017-1000482: Improper Neutralization of Input During Web Page Generation
A member of the Plone 2.5-5.1rc1 site could set javascript in the homepage property of his profile, and have this executed when a visitor click the home page link on the author page...
5.4CVSS6AI score0.00565EPSS
SaveExploits0References2
20