PYSEC-2010-19

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/plone/PYSEC-2010-19.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2010-19
Aliases
Published
2010-06-24T12:17:00Z
Modified
2026-06-10T17:02:29.501386029Z
Summary
[none]
Details

Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.

References

Affected packages

PyPI / plone

Package

Name
plone
View open source insights on deps.dev
Purl
pkg:pypi/plone

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.3.5

Affected versions

3.*
3.2a1
3.2rc1
3.2
3.2.1
3.2.2
3.2.3
3.3b1
3.3rc1
3.3rc2
3.3rc3
3.3rc4
3.3rc5
3.3
3.3.1
3.3.2
3.3.3
3.3.4

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/plone/PYSEC-2010-19.yaml"