CVE-2008-4571 in Plone

Сводка

по MITRE

Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Резервировать: 15.10.2008
• Раскрытие: 15.10.2008
• Модерация: принято
• Вход: VDB-44537
• CPE: готов
• CWE: CWE-79 (Подтверждённый)
• CVSS: 4.3 (VulDB)
• EPSS: 0.01144
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Agriculture, Lawfirm, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-4571
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4571
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-4571/