CVE-2011-1949: Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1...

Security readout for executives and security teams

This is an authenticated cross-site scripting issue in legacy Plone. A logged-in user could inject script or HTML through Plone's safe_html filtering path, potentially affecting other users who view processed content. The public record does not provide severity scoring, exploit details, or active exploitation evidence. Exposure is most likely in old Plone sites, intranets, archives, or custom applications still running Plone 2.1 through 4.1 or carrying the same PortalTransforms code. Anonymous internet exposure is not established because the CVE specifies authenticated users. Treat this as a legacy platform risk. It is not marked as actively exploited in the supplied sources, but any remaining Plone 2.1 through 4.1 deployment should be reviewed because authenticated XSS can compromise user trust and administrative sessions. Mitigation focus: Identify any Plone 2.1 through 4.1 systems or derived deployments.; Check Plone's CVE-2011-1949 advisory for vendor-supported fixes or upgrade guidance.; Restrict content creation and editing to trusted users until remediated..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.