Search for vulnerabilities
| Vulnerability ID | VCID-x8n5-qj35-eqb1 |
| Aliases |
CVE-2013-4190
PYSEC-2014-54 |
| Summary | Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| There are no known severity scores. | ||
No EPSS data available for this vulnerability.
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-06-02T04:03:29.145460+00:00 | Pypa Importer | Import | https://github.com/pypa/advisory-database/blob/main/vulns/plone/PYSEC-2014-54.yaml | 38.6.0 |