Description
Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2018-0324 | Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages. |
Github GHSA |
GHSA-v7q8-wvvh-c97p | Moderate severity vulnerability that affects Zope2 |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T01:14:06.107Z
Reserved: 2010-03-25T00:00:00.000Z
Link: CVE-2010-1104
No data.
Status : Deferred
Published: 2010-03-25T17:30:00.390
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-1104
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA