Test ID:	1.3.6.1.4.1.25623.1.0.151106
Category:	Web Servers
Title:	Zope XSS Vulnerability (GHSA-m755-gxxg-r5qh)
Summary:	Zope is prone to a cross-site scripting (XSS) vulnerability via; the title property in the Zope management interface.
Description:	Summary: Zope is prone to a cross-site scripting (XSS) vulnerability via the title property in the Zope management interface. Vulnerability Insight: The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface (ZMI) because the title property is displayed unquoted in the breadcrumbs element. Affected Software/OS: Zope version 4.8.10 and prior and version 5.x through 5.8.5. Solution: Update to version 4.8.11, 5.8.6 or later. CVSS Score: 4.7 CVSS Vector: AV:N/AC:L/Au:M/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-44389 https://github.com/zopefoundation/Zope/commit/21dfa78609ffd8b6bd8143805678ebbacae5141a https://github.com/zopefoundation/Zope/commit/aeaf2cdc80dff60815e3706af448f086ddc3b98d https://github.com/zopefoundation/Zope/security/advisories/GHSA-m755-gxxg-r5qh
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.