{"id":"CVE-2011-1340","aliases":[],"url":"https://o3.security/vulnerability/CVE-2011-1340","summary":"Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the…","details":"Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.","published":"2011-08-05T21:55:01.390","modified":"2026-06-16T23:29:11.153","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"FIX","url":"http://dev.plone.org/plone/changeset/12262"},{"type":"EXPLOIT","url":"http://dev.plone.org/plone/ticket/6110"},{"type":"WEB","url":"http://jvn.jp/en/jp/JVN41222793/index.html"},{"type":"WEB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000056"},{"type":"FIX","url":"http://dev.plone.org/plone/changeset/12262"},{"type":"EXPLOIT","url":"http://dev.plone.org/plone/ticket/6110"},{"type":"WEB","url":"http://jvn.jp/en/jp/JVN41222793/index.html"},{"type":"WEB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000056"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-16T23:29:11.153"}}