| Package | Affected versions | Patched versions |
|---|---|---|
| plone | ≥ 4.0.0, ≤ 4.3.11≥ 4.2, < 4.3.12≥ 5.0, < 5.0.7≥ 5.0.0, ≤ 5.0.6 | 4.3.125.0.7 |
| plone | = 4.0= 4.0.1= 4.0.10= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.7= 4.0.8= 4.0.9= 4.1= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.3= 4.3.1= 4.3.10= 4.3.11= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9= 5.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.1a1 |
z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted GET request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free