CVE-2021-29002: XSS
A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.sitetitle" parameter.
Other sources
A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the form.widgets.sitetitle parameter.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2021-29002?
The vulnerability CVE-2021-29002 is a stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3.
How does the vulnerability CVE-2021-29002 occur?
The vulnerability CVE-2021-29002 occurs in the site-controlpanel via the "form.widgets.site_title" parameter.
What is the severity level of vulnerability CVE-2021-29002?
The severity level of vulnerability CVE-2021-29002 is medium (5.4).
How can I fix the vulnerability CVE-2021-29002 in Plone CMS 5.2.3?
To fix the vulnerability CVE-2021-29002 in Plone CMS 5.2.3, apply the necessary patches or updates provided by Plone or the vendor.
Is there any additional information or references available for vulnerability CVE-2021-29002?
Yes, you can find additional information and references for vulnerability CVE-2021-29002 in the following sources: [GitHub](https://github.com/plone/Products.CMFPlone/issues/3255), [Exploit DB](https://www.exploit-db.com/exploits/49668).