CVE:CVE-2011-4777
CNNVD:CNNVD-201112-331
Parallels Plesk Panel 10.4.4_build20111103.18版本的Site Editor (也称为SiteBuilder)功能中存在跨站脚本漏洞。远程攻击者可借助login参数注入任意web脚本或者HTML。
solution:Upgrade parallels parallels_plesk_panel to a higher version than 10.4.4_build20111103.18,and avoid the version 10.4.4_build20111103.18