CVE-2011-1340 in plone

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2011-03-09

Divulgación

2011-08-05

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
58193	plone secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2011-1340

Fuentes

• MITRE
• NVD
• CVE Details