CVE-2011-1340
N/A
N/A
Summary
Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://dev.plone.org/plone/ticket/6110
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000056
- http://jvn.jp/en/jp/JVN41222793/index.html
- http://dev.plone.org/plone/changeset/12262
References
- http://dev.plone.org/plone/ticket/6110
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000056
- http://jvn.jp/en/jp/JVN41222793/index.html
- http://dev.plone.org/plone/changeset/12262
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.