NVD

Id
81871  
Name
CVE-2016-7147  
Description
Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-02-15  
Published
2017-02-04  
Modified Date
2017-02-09  
Seq
2016-7147  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
405449 81871 CVE-2016-4038 http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016  View
405450 81871 CVE-2016-4038 [oss-security] 20160418 CVE request - samsumg android phone msm_sensor_config function write some range kernel address with any value  View
405451 81871 CVE-2016-4038 [oss-security] 20160418 Re: CVE request - samsumg android phone msm_sensor_config function write some range kernel address with any value  View

Related JVN