CVE-2007-0240

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-22 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request.

Affected products

zopefoundation Zope: through 2.10.2

References

http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html
http://secunia.com/advisories/24017
http://secunia.com/advisories/24713
http://secunia.com/advisories/25239
http://www.debian.org/security/2007/dsa-1275
http://www.securityfocus.com/bid/23084
http://www.vupen.com/english/advisories/2007/1041
http://www.zope.org/Products/Zope/Hotfix-2007-03-20/announcement/view
https://exchange.xforce.ibmcloud.com/vulnerabilities/33187
http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html
http://secunia.com/advisories/24017
http://secunia.com/advisories/24713

Get alerted when CVE-2007-0240 or the next vulnerability affects your stack