What’s Vulnerable › Vulnerabilities

CVE-2010-2422

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-06-24 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transform.

Affected products

• Plone CMS: 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.5 (+30)

References

• http://plone.org/products/plone/security/advisories/cve-2010-unassigned-html-injection-in-safe_html
• http://secunia.com/advisories/40270
• http://www.securityfocus.com/bid/40999
• http://plone.org/products/plone/security/advisories/cve-2010-unassigned-html-injection-in-safe_html
• http://secunia.com/advisories/40270
• http://www.securityfocus.com/bid/40999

Get alerted when CVE-2010-2422 or the next vulnerability affects your stack