| Package | Affected versions | Patched versions |
|---|---|---|
| plone | < 4.1.1 | 4.1.1 |
| products-cmfplone | ≥ 4.1a1, < 4.1rc3< 4.0.7 | 4.1rc34.0.7 |
| products-passwordresettool | < 2.0.6 | 2.0.6 |
| plone | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 2.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.1= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.5= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.1= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5.1= 3.1.6= 3.1.7= 3.2= 3.2.1= 3.2.2= 3.2.3= 3.3= 3.3.1= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 4.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6.1≤ 4.1 |
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free