Tuesday, December 5, 2017

Multiple Plone Cross-Site Scripting Vulnerabilities

Earlier this year, FortiGuard Labs discovered two cross-site scripting (XSS) vulnerabilities and one cross-site request forgery (CSRF) vulnerability affecting Plone versions from 2.5.5 to 5.1rc1. The first cross-site scripting (XSS) vulnerability exists in the Plone login process and only works in conjunction ...

from Google Alert - vulnerability http://ift.tt/2kmg0Ar
via IFTTT

No comments:

Post a Comment