CVE-2016-7136
- State
- Published
- Severity
- Not scored
- Published
- Mar 7, 2017
- Updated
- Aug 6, 2024
- Reserved
- Sep 5, 2016
Description
z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted GET request.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
- 20161019 Multiple Vulnerabilities in Plone CMSmailing-list
- https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone-forms
- [oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilitiesmailing-list
- [oss-security] 20160905 Re: CVE request: Plone multiple vulnerabilitiesmailing-list
- 20161012 Multiple Vulnerabilities in Plone CMSmailing-list
- 92752vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.