Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.
Metrics
Affected Vendors & Products
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published: 2010-03-25T17:00:00.000Z
Updated: 2024-08-07T01:14:06.107Z
Reserved: 2010-03-25T00:00:00.000Z
Link: CVE-2010-1104
No data.
Status : Deferred
Published: 2010-03-25T17:30:00.390
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-1104