PYSEC-2026-765
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/zope2/PYSEC-2026-765.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-765
- Aliases
-
- CVE-2010-1104
- GHSA-v7q8-wvvh-c97p
- Published
- 2026-07-02T14:13:08.911604Z
- Modified
- 2026-07-06T08:01:03.735373723Z
- Summary
- Moderate severity vulnerability that affects Zope2
- Details
-
Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2010-1104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55599
- https://github.com/advisories/GHSA-v7q8-wvvh-c97p
- https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html
- http://secunia.com/advisories/38007
- http://www.osvdb.org/61655
- http://www.securityfocus.com/bid/37765
- http://www.vupen.com/english/advisories/2010/0104
- https://pypi.org/project/zope2
Affected packages
PyPI / zope2
Package
- Name
- zope2
- View open source insights on deps.dev
- Purl
- pkg:pypi/zope2