CVE-2011-1948
Fixed in a distro release EPSS 2%
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.1.1 |
| PyPI | products-cmfplone | 4.0.7 |
| PyPI | products-cmfplone | 4.1rc3 |
| PyPI | products-passwordresettool | 2.0.6 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel cluster 5 | conga | 0:0.12.2-51.el5 |
| Red Hat rhel cluster 5 | conga-debuginfo | 0:0.12.2-51.el5 |
| Red Hat rhel cluster 5 | luci | 0:0.12.2-51.el5 |
| Red Hat rhel cluster 5 | ricci | 0:0.12.2-51.el5 |