What is GHSA-46f9-f8jm-mw2x?

GHSA-46f9-f8jm-mw2x is a security advisory published by GitHub Security Advisories with Medium severity. Plone Cross-site Scripting vulnerability in the LiveSearch module

Which CVE IDs does GHSA-46f9-f8jm-mw2x cover?

GHSA-46f9-f8jm-mw2x covers the following CVE IDs: CVE-2008-4571. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-46f9-f8jm-mw2x?

GHSA-46f9-f8jm-mw2x affects 1 product, including: pip/Plone:\u003c 3.0.4.

GHSA-46f9-f8jm-mw2xMedium

Plone Cross-site Scripting vulnerability in the LiveSearch module

Vendor

GitHub Security Advisories

Published

May 2, 2022

Last Modified

February 9, 2024

🔗 CVE IDs covered (1)

CVE-2008-4571 →

📋 Description

Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.

🎯 Affected products1

pip/Plone:< 3.0.4

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2008-4571
http://dev.plone.org/plone/ticket/7439
http://plone.org/products/plone/releases/3.0.4
https://web.archive.org/web/20081012113150/http://secunia.com/advisories/28293
https://web.archive.org/web/20120705155735/http://www.securityfocus.com/bid/27098
https://github.com/advisories/GHSA-46f9-f8jm-mw2x