Plone < 3.1 XSRF

The version of Plone installed on the remote host is prior to 3.1.0. It is, therefore, affected by multiple cross-site request forgery vulnerabilities. A flaw exists, allowing remote attackers to add arbitrary accounts via the joinform page and change the privileges of arbitrary groups via the...

Plone products.isurlinportal < 2.1.0 / 3.x < 3.1.0 Open Redirect

The version of products.isurlinportal installed on the remote host is prior to 2.1.0, or 3.x prior to 3.1.0. It is, therefore, affected by an open redirect vulnerability. An unauthenticated, remote attacker, can exploit this, via the url /login?camefrom=////evil.example, to redirect to an externa...

Plone 2.0.x < 2.1.3 Insecure Access Control

The version of Plone installed on the remote host is 2.0.x prior to 2.1.3. It is, therefore, affected by an insecure access control due to not restricting access to the changeMemberPortrait, deletePersonalPortrait, and testCurrentPassword methods. An unauthenticated, remote attacker can exploit...

Plone 4.3.x < 5.2.5 Multiple Vulnerabilities (HF 20210518)

The version of Plone installed on the remote host is 4.3.x prior to 5.2.5. It is, therefore, affected by the following vulnerabilities: - Plone CMS has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. CVE-2021-3313 -...

Plone < 3.3.6 / 4.0.x < 4.0.8 Privilege Escalation (HF 20110622)

The version of Plone installed on the remote host is prior to 3.3.6 or 4.0.x prior to 4.0.8. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to gain administrative access to the application. Note that Nessus has not tested f...

Plone 4.x < 4.0.10 / 4.1.x < 4.1.1 Multiple Vulnerabilities (HF 20110928)

The version of Plone installed on the remote host is 4.x prior to 4.0.10 or 4.1.x prior to 4.1.1. It is, therefore, affected by the following vulnerabilities: - Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used allows remote attackers to execute arbitrary commands via vectors related t...

Plone 2.5.5 < 4.3.12 / 5.0.x < 5.0.7 Multiple Vulnerabilities (HF 20170117)

The version of Plone installed on the remote host is 2.5.5 prior to 4.3.12, or 5.0.x prior to 5.0.7. It is, therefore, affected by the following vulnerabilities: - Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone allows remote...

Plone 3.3.x < 4.3.10 / 5.0.x < 5.0.5 Multiple Vulnerabilities (HF 20160419)

The version of Plone installed on the remote host is 3.3.x prior to 4.3.10, 5.0.x prior to 5.0.5. It is, therefore, affected by the following vulnerabilities: - Plone does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav...

Plone < 2.5.5 / 3.x < 3.3.6 / 4.x < 4.0.4 Privilege Escalation (HF 20110720)

The version of Plone installed on the remote host is prior to 2.5.5, 3.x prior to 3.3.6, or 4.x prior to 4.0.4. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to gain administrative access to the application. Note that Ness...

Plone < 5.2.3 Multiple Vulnerabilities

The version of Plone installed on the remote host is prior to 5.2.3. It is, therefore, affected by the following vulnerabilities: - Plone allows XXE attacks via a feature that is explicitly only available to the Manager role. CVE-2020-28734 - Plone allows SSRF attacks via the tracebacks feature...

Plone 2.5.5 < 4.3.16 / 5.0.x < 5.0.10 Multiple Vulnerabilities (HF 20171128)

The version of Plone installed on the remote host is 2.5.5 prior to 4.3.16, 5.0.x prior to 5.0.10. It is, therefore, affected by the following vulnerabilities: - When you visit a page where you need to login, sends you to the login form with a 'camefrom' parameter set to the previous url...

Plone < 3.0.4 XSS

The version of Plone installed on the remote host is prior to 3.0.4. It is, therefore, affected by a cross-site scripting XSS vulnerability in the LiveSearch module due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this...

Plone < 2.5.3 XSS

The version of Plone installed on the remote host is prior to 2.5.3. It is, therefore, affected by a cross-site scripting XSS vulnerability, in the skins/plonetemplates/defaulterrormessage.pt due to improper validation of the typename parameter to Members/ipa/createObject before returning it to...

Plone 2.5.x < 2.5.5 / 3.0.x < 3.0.3 RCE (HF 20071106)

The version of Plone installed on the remote host is 2.5.x prior to 2.5.5 or 3.0.x prior to 3.0.3. It is, therefore, affected by a remote code execution vulnerability in the statusmessages and linkintegrity modules. A unauthenticated, remote attacker can exploit this to bypass authentication and...

Plone 3.3.x < 5.0 Multiple XSRF Vulnerabilities (HF 20151006)

The version of Plone installed on the remote host is prior to 5.0. It is, therefore, affected by multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface. CVE-2015-7293 Note that Nessus has not tested for these issues but has instead relied only on the application's...

Cross-site Scripting (XSS)

plone.app.textfield is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to returning unsanitized RichText content when the stored and output MIME types are identical, which allows an attacker to inject and execute arbitrary JavaScript in a victim's browser...

plone.restapi: Stored XSS by spoofing mime type

Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...

GHSA-8RQH-VXPR-X77P plone.restapi: Stored XSS by spoofing mime type

Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...

GHSA-4R4F-GG25-RMG5 plone.app.textfield: Stored XSS by spoofing mime type

Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...

plone.app.textfield: Stored XSS by spoofing mime type

Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...