A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
plone plone |
||
plone plone 5.1 |