GHSA-8mc4-2xrc-g582

Source

https://github.com/advisories/GHSA-8mc4-2xrc-g582

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-8mc4-2xrc-g582/GHSA-8mc4-2xrc-g582.json

Aliases

• CVE-2020-7937
• PYSEC-2020-86

Published

2022-05-24T17:07:14Z

Modified

2024-02-16T08:05:34.230174Z

Summary

Plone cross site scripting (XSS)

Details

An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-7937
• https://plone.org/security/hotfix/20200121
• https://plone.org/security/hotfix/20200121/xss-in-the-title-field-on-plone-5-0-and-higher
• https://www.openwall.com/lists/oss-security/2020/01/22/1
• http://www.openwall.com/lists/oss-security/2020/01/24/1