Plone · Plone · CVE-2012-5494
**Name of the Vulnerable Software and Affected Versions**
Plone versions prior to 4.2.3
Plone versions 4.3 prior to beta 1
**Description**
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to `{u,}translate`.
**Recommendations**
For Plone versions prior to 4.2.3, update to version 4.2.3 or later.
For Plone versions 4.3 prior to beta 1, update to beta 1 or later.