| Package | Affected versions | Patched versions |
|---|---|---|
| plone | = 5.0rc1≥ 3.3, < 3.3.7≥ 3.3, < 4.0a1≥ 4.0, < 4.0.11≥ 4.0, < 4.1a1≥ 4.1, < 4.1.7≥ 4.1, < 4.2a1≥ 4.2, < 4.2.8≥ 4.2, < 4.3a1≥ 4.3, < 4.3.7≥ 5.0a1, < 5.0rc2 | 3.3.74.0a14.0.114.1a14.1.74.2a14.2.84.3a14.3.75.0rc2 |
| plone | = 3.3= 3.3.1= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 3.3.6= 4.0= 4.0.1= 4.0.10= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.7= 4.0.8= 4.0.9= 4.1= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.3= 4.3.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.3.6= 5.0 |
Plone's URL checking infrastructure includes a method for checking if URLs valid and located in the Plone site. By passing HTML into a specially crafted url containing <script, %3Cscript, javascript:, or javascript%3A, Cross-site Scripting can be achieved.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free