4 matches found
Plone 5.2.3 XSS
The version of Plone installed on the remote host is 5.2.3. It is, therefore, affected by a stored cross-site scripting XSS vulnerability within the site-controlpanel due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this...
5.4CVSS6.2AI score0.00762EPSS
SaveExploits1References3
CVE-2021-29002
A stored cross-site scripting XSS vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.sitetitle" parameter...
5.4CVSS5.5AI score0.00762EPSS
SaveExploits1References1
20