Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3309
HistoryJan 18, 2017 - 7:17 a.m.

Cross-site Scripting (XSS)

2017-01-1807:17:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

EPSS

0.002

Percentile

64.8%

plone is vulnerable to cross-site scripting (XSS). It is possible to perform a reflected XSS via the ZMI (manage_findResult). This vulnerability exists because of an incomplete fix for CVE-2016-7140.