CVE-2012-5502 in Plone
Summary
Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
10/24/2012
Disclosure
09/30/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71683 | Plone cross site scripting | 79 | Not defined | Official fix | CVE-2012-5502 |