CVE-2008-4571 | BDVDB-2026-32906 Detail

Description#

Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/27098
http://secunia.com/advisories/28293
http://plone.org/products/plone/releases/3.0.4
http://dev.plone.org/plone/ticket/7439
http://osvdb.org/40660

Exploit#

No public exploit known

History#

Version 12008-10-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.