CVE-2016-7147

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/96117
https://plone.org/security/hotfix/20170117Patch, Release Notes, Vendor Advisory
https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2Vendor Advisory
https://www.curesec.com/blog/article/blog/Plone-XSS-186.htmlPatch, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96117
https://plone.org/security/hotfix/20170117Patch, Release Notes, Vendor Advisory
https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2Vendor Advisory
https://www.curesec.com/blog/article/blog/Plone-XSS-186.htmlPatch, Third Party Advisory, VDB Entry

Timeline

Published: Feb 4, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-71486.1MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross CVE-2016-71496.1Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via CVE-2016-71505.4Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script o CVE-2016-71515.5Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.CVE-2016-71525.3The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it eas CVE-2016-71535.3The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it ea CVE-2016-71546.7Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (CVE-2016-71554.4hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or CVE-2016-71564.4The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a deni CVE-2016-71574.4The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local CVE-2016-71607.5A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading t CVE-2016-71619.8Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitr