Executive brief
Zope Cross-site scripting (XSS) vulnerability in ZMI pages
Affected products
- PyPI Zope2
Junglewise Threat Intelligence
CVE-2009-5145: PYSEC-2026-763 - Zope Cross-site scripting (XSS) vulnerability in ZMI pages
CVE-2009-5145 · Severity: low · CVSS 3 · Published 2026-07-02
Technologies: Zope2 (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1067 - Zope Command Execution Vulnerability
- PYSEC-2026-766 - Zope XSS Vulnerability
- PYSEC-2026-765 - Moderate severity vulnerability that affects Zope2
- Plone and Zope2 privilege escalation via incorrect security fix
- PYSEC-2014-76 - Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which m