New Spanish Plone/Zope users community
Document Actions
Zope XSS Scripting Hotfix
If you are running a version of Zope in the 2.8, 2.9 or 2.10 range download and install this cross side scripting vulnerability fix.
A vulnerability has been discovered in Zope, whereby misuse of certain types of HTTP GET could lead to elevated privileges. All Zope versions up to and including 2.10.2 are affected.
