Show filters
43 Total Results
Displaying 41-43 of 43
Sort by:
Attacker Value
Unknown
CVE-2011-2528
Disclosure Date: July 19, 2011 (last updated October 04, 2023)
Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.
0
Attacker Value
Unknown
CVE-2011-1948
Disclosure Date: June 06, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2011-1949
Disclosure Date: June 06, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
0
