CVE-2011-1340

CVE-2011-1340

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.

EPSS 1.2% · Fix available

Published

2011-08-05T21:00:00.000Z

Updated

2024-09-16T23:40:36.578Z

Stack: python

Check your server →