Plone Incompletely Fixes Cross-Site Scripting Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on Zope based on Python's open source object-oriented Web application server.Zope ZMI is one of the management interface. A cross-site scripting vulnerability exists in the managefindResu...

PT-2017-9094

Name of the Vulnerable Software and Affected Versions Plone versions prior to 4.3.12 Plone versions 5.x prior to 5.0.7 Description A cross-site scripting XSS issue exists in the manage findResult component of the search feature in Zope ZMI, allowing remote attackers to inject arbitrary web script...