plone/plone · Security
Plone XSS Vulnerability
- GHSA ID
- GHSA-38g6-x6jv-jwff
- CVE ID
- CVE-2021-29002
- Severity
- medium
- Published
- Updated
Description
A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the form.widgets.site_title parameter.
CWEs
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')