Lucene search
K

6 matches found

OSV
OSV
added 2022/05/17 5:50 a.m.17 views

GHSA-QJ7X-WM9Q-QJX8 Plone Cross-site Scripting vulnerability in PortalTransforms

Cross-site scripting XSS vulnerability in PortalTransforms in Plone 2.1 through 3.3.5 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safehtml transform...

6.1CVSS5.3AI score0.00392EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/05/17 5:50 a.m.14 views

Plone Cross-site Scripting vulnerability in PortalTransforms

Cross-site scripting XSS vulnerability in PortalTransforms in Plone 2.1 through 3.3.5 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safehtml transform...

4.3CVSS6AI score0.00392EPSS
Exploits0References6Affected Software1
Prion
Prion
added 2010/06/24 12:17 p.m.10 views

Cross site scripting

Cross-site scripting XSS vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safehtml transform...

4.3CVSS6AI score0.00392EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2010/06/24 12:17 p.m.20 views

PYSEC-2010-19

Cross-site scripting XSS vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safehtml transform...

4.3CVSS4.4AI score0.00392EPSS
Exploits0References3
CVE
CVE
added 2010/06/23 5:13 p.m.78 views

CVE-2010-2422

CVE-2010-2422 describes a Cross-site scripting (XSS) vulnerability in PortalTransforms’ safe_html transform in Plone versions 2.1 through 3.3.4, fixed by hotfix 20100612. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the safe_html transform. Exploitation ...

4.3CVSS5.6AI score0.00392EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2010/06/23 5:13 p.m.15 views

CVE-2010-2422

Cross-site scripting XSS vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safehtml transform...

5.5AI score0.00392EPSS
Exploits0References3
Rows per page
Query Builder