+++ This bug was initially created as a clone of Bug #284874 +++ CVE-2008-7220 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-7220): Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors. Plone ships 1.5.0_rc1 in ./lib/python/kss/core/plugins/effects/3rd_party/prototype.js
Appears to be obsolete, the package is no longer in portage.