Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/plone@5.0b2
Typepypi
Namespace
Nameplone
Version5.0b2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.0.10
Latest_non_vulnerable_version6.0.10
Affected_by_vulnerabilities
0
url VCID-4ttq-tacy-4ugg
vulnerability_id VCID-4ttq-tacy-4ugg
summary 
Improper Restriction of Rendered UI Layers or Frames
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-0669
reference_id
reference_type
scores
0
value 0.0005
scoring_system epss
scoring_elements 0.15921
published_at 2026-06-07T12:55:00Z
1
value 0.0005
scoring_system epss
scoring_elements 0.15963
published_at 2026-06-06T12:55:00Z
2
value 0.0005
scoring_system epss
scoring_elements 0.15973
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-0669
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
2
reference_url https://www.incibe.es/en/incibe-cert/notices/aviso/cross-frame-scripting-xfs-plone-cms
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.incibe.es/en/incibe-cert/notices/aviso/cross-frame-scripting-xfs-plone-cms
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-0669
reference_id CVE-2024-0669
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-0669
4
reference_url https://github.com/advisories/GHSA-5xfx-55x4-j223
reference_id GHSA-5xfx-55x4-j223
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5xfx-55x4-j223
fixed_packages
0
url pkg:pypi/plone@6.0.6
purl pkg:pypi/plone@6.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@6.0.6
1
url pkg:pypi/plone@6.0.7
purl pkg:pypi/plone@6.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@6.0.7
aliases CVE-2024-0669, GHSA-5xfx-55x4-j223
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4ttq-tacy-4ugg
1
url VCID-6568-4ert-1bau
vulnerability_id VCID-6568-4ert-1bau
summary Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5524.json
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5524.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-5524
reference_id
reference_type
scores
0
value 0.00185
scoring_system epss
scoring_elements 0.40034
published_at 2026-06-07T12:55:00Z
1
value 0.00185
scoring_system epss
scoring_elements 0.40062
published_at 2026-06-06T12:55:00Z
2
value 0.00185
scoring_system epss
scoring_elements 0.39978
published_at 2026-06-04T12:55:00Z
3
value 0.00185
scoring_system epss
scoring_elements 0.40059
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-5524
2
reference_url https://github.com/advisories/GHSA-p5wr-vp8g-q5p4
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-p5wr-vp8g-q5p4
3
reference_url https://github.com/plone/Products.CMFPlone/commit/a7d47692058e10ce89968e7ca4dacbdf44fcad4f
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/a7d47692058e10ce89968e7ca4dacbdf44fcad4f
4
reference_url https://github.com/plone/Products.CMFPlone/pull/1912
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/pull/1912
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-81.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-81.yaml
6
reference_url https://plone.org/security/hotfix/20170117/sandbox-escape
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20170117/sandbox-escape
7
reference_url http://www.openwall.com/lists/oss-security/2017/01/18/6
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2017/01/18/6
8
reference_url http://www.securityfocus.com/bid/95679
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/95679
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1436640
reference_id 1436640
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1436640
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-5524
reference_id CVE-2017-5524
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-5524
fixed_packages
0
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8v5e-zud2-g7em
7
vulnerability VCID-8wkk-84ky-17ak
8
vulnerability VCID-951j-w95x-83g8
9
vulnerability VCID-9gu8-dgkr-sua3
10
vulnerability VCID-ax8a-2g7j-6ya2
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-j8fv-uhxw-jkcw
20
vulnerability VCID-jvvz-bafs-t7gc
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-th3f-wx1q-eba5
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-z4jt-v88h-77er
28
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
1
url pkg:pypi/plone@5.1b1
purl pkg:pypi/plone@5.1b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8v5e-zud2-g7em
7
vulnerability VCID-8wkk-84ky-17ak
8
vulnerability VCID-951j-w95x-83g8
9
vulnerability VCID-9gu8-dgkr-sua3
10
vulnerability VCID-ax8a-2g7j-6ya2
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-j8fv-uhxw-jkcw
20
vulnerability VCID-p71t-er3d-9fdn
21
vulnerability VCID-q7nt-b3s9-9kf6
22
vulnerability VCID-r52t-hx1j-ufa1
23
vulnerability VCID-th3f-wx1q-eba5
24
vulnerability VCID-x2xm-hpc2-uubq
25
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1b1
aliases CVE-2017-5524, GHSA-p5wr-vp8g-q5p4, PYSEC-2017-81
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6568-4ert-1bau
2
url VCID-69ps-uetw-y3gf
vulnerability_id VCID-69ps-uetw-y3gf
summary A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000482.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000482.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000482
reference_id
reference_type
scores
0
value 0.00287
scoring_system epss
scoring_elements 0.52491
published_at 2026-06-07T12:55:00Z
1
value 0.00287
scoring_system epss
scoring_elements 0.52443
published_at 2026-06-04T12:55:00Z
2
value 0.00287
scoring_system epss
scoring_elements 0.52502
published_at 2026-06-05T12:55:00Z
3
value 0.00287
scoring_system epss
scoring_elements 0.52511
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000482
2
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone
3
reference_url https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/05a943ecbcdda56bacc93b55c9e2e908d8a7dfab
4
reference_url https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/0e50e1e67ea3b6d3187f78cb1a1628081f654d3b
5
reference_url https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/236b62b756ff46a92783b3897e717dfb15eb07d8
6
reference_url https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/7db5b2c8fb684055987b8c4fdedc29289bd26373
7
reference_url https://github.com/plone/Products.CMFPlone/issues/2232
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/issues/2232
8
reference_url https://github.com/plone/Products.CMFPlone/pull/2233
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/pull/2233
9
reference_url https://github.com/plone/Products.CMFPlone/pull/2234
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/pull/2234
10
reference_url https://github.com/plone/Products.CMFPlone/pull/2235
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/pull/2235
11
reference_url https://github.com/plone/Products.CMFPlone/pull/2236
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/pull/2236
12
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-71.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-71.yaml
13
reference_url https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20171128/xss-using-the-home_page-member-property
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1532485
reference_id 1532485
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1532485
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000482
reference_id CVE-2017-1000482
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000482
16
reference_url https://github.com/advisories/GHSA-859j-668v-mrr6
reference_id GHSA-859j-668v-mrr6
reference_type
scores
url https://github.com/advisories/GHSA-859j-668v-mrr6
fixed_packages
0
url pkg:pypi/plone@5.1.0
purl pkg:pypi/plone@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-8wkk-84ky-17ak
6
vulnerability VCID-951j-w95x-83g8
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-d42u-s7za-a3ad
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-q7nt-b3s9-9kf6
18
vulnerability VCID-r52t-hx1j-ufa1
19
vulnerability VCID-th3f-wx1q-eba5
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0
aliases CVE-2017-1000482, GHSA-859j-668v-mrr6, PYSEC-2018-71
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-69ps-uetw-y3gf
3
url VCID-8rp3-p3qe-x7ej
vulnerability_id VCID-8rp3-p3qe-x7ej
summary Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-28736
reference_id
reference_type
scores
0
value 0.00484
scoring_system epss
scoring_elements 0.65687
published_at 2026-06-06T12:55:00Z
1
value 0.00484
scoring_system epss
scoring_elements 0.65676
published_at 2026-06-07T12:55:00Z
2
value 0.00484
scoring_system epss
scoring_elements 0.65624
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-28736
1
reference_url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
2
reference_url https://github.com/advisories/GHSA-2c8c-84w2-j38j
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-2c8c-84w2-j38j
3
reference_url https://github.com/plone/Products.CMFPlone/issues/3209
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/issues/3209
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-248.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-248.yaml
5
reference_url https://www.misakikata.com/codes/plone/python-en.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.misakikata.com/codes/plone/python-en.html
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-28736
reference_id CVE-2020-28736
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-28736
fixed_packages
0
url pkg:pypi/plone@5.2.3
purl pkg:pypi/plone@5.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8v5e-zud2-g7em
4
vulnerability VCID-ax8a-2g7j-6ya2
5
vulnerability VCID-basq-jjsf-3fbd
6
vulnerability VCID-d42u-s7za-a3ad
7
vulnerability VCID-eu4z-htaq-c3d6
8
vulnerability VCID-p71t-er3d-9fdn
9
vulnerability VCID-q7nt-b3s9-9kf6
10
vulnerability VCID-r52t-hx1j-ufa1
11
vulnerability VCID-th3f-wx1q-eba5
12
vulnerability VCID-x2xm-hpc2-uubq
13
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3
aliases CVE-2020-28736, GHSA-2c8c-84w2-j38j, PYSEC-2020-248
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8rp3-p3qe-x7ej
4
url VCID-8v5e-zud2-g7em
vulnerability_id VCID-8v5e-zud2-g7em
summary A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.site_title" parameter.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-29002
reference_id
reference_type
scores
0
value 0.0031
scoring_system epss
scoring_elements 0.54493
published_at 2026-06-06T12:55:00Z
1
value 0.0031
scoring_system epss
scoring_elements 0.54483
published_at 2026-06-07T12:55:00Z
2
value 0.0031
scoring_system epss
scoring_elements 0.54427
published_at 2026-06-04T12:55:00Z
3
value 0.0031
scoring_system epss
scoring_elements 0.54484
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-29002
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
2
reference_url https://github.com/plone/Products.CMFPlone/issues/3255
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/issues/3255
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-889.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-889.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-29002
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-29002
5
reference_url https://www.exploit-db.com/exploits/49668
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/49668
6
reference_url https://github.com/advisories/GHSA-38g6-x6jv-jwff
reference_id GHSA-38g6-x6jv-jwff
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-38g6-x6jv-jwff
fixed_packages
0
url pkg:pypi/plone@5.2.4
purl pkg:pypi/plone@5.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-ax8a-2g7j-6ya2
4
vulnerability VCID-d42u-s7za-a3ad
5
vulnerability VCID-eu4z-htaq-c3d6
6
vulnerability VCID-p71t-er3d-9fdn
7
vulnerability VCID-q7nt-b3s9-9kf6
8
vulnerability VCID-r52t-hx1j-ufa1
9
vulnerability VCID-th3f-wx1q-eba5
10
vulnerability VCID-x2xm-hpc2-uubq
11
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.4
aliases CVE-2021-29002, GHSA-38g6-x6jv-jwff, PYSEC-2021-889
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8v5e-zud2-g7em
5
url VCID-8wkk-84ky-17ak
vulnerability_id VCID-8wkk-84ky-17ak
summary Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7940.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7940.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-7940
reference_id
reference_type
scores
0
value 0.0034
scoring_system epss
scoring_elements 0.5704
published_at 2026-06-05T12:55:00Z
1
value 0.0034
scoring_system epss
scoring_elements 0.56988
published_at 2026-06-04T12:55:00Z
2
value 0.0034
scoring_system epss
scoring_elements 0.57035
published_at 2026-06-07T12:55:00Z
3
value 0.0034
scoring_system epss
scoring_elements 0.57047
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-7940
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-89.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-89.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-7940
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-7940
5
reference_url https://plone.org/security/hotfix/20200121
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121
6
reference_url https://plone.org/security/hotfix/20200121/password-strength-checks-were-not-always-checked
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121/password-strength-checks-were-not-always-checked
7
reference_url https://www.openwall.com/lists/oss-security/2020/01/22/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2020/01/22/1
8
reference_url http://www.openwall.com/lists/oss-security/2020/01/24/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/01/24/1
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1798203
reference_id 1798203
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1798203
10
reference_url https://github.com/advisories/GHSA-cw58-gpgw-hwx2
reference_id GHSA-cw58-gpgw-hwx2
reference_type
scores
url https://github.com/advisories/GHSA-cw58-gpgw-hwx2
fixed_packages
0
url pkg:pypi/plone@5.1.7
purl pkg:pypi/plone@5.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-8wkk-84ky-17ak
6
vulnerability VCID-951j-w95x-83g8
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-d42u-s7za-a3ad
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-q7nt-b3s9-9kf6
18
vulnerability VCID-r52t-hx1j-ufa1
19
vulnerability VCID-th3f-wx1q-eba5
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.7
1
url pkg:pypi/plone@5.2.1
purl pkg:pypi/plone@5.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8t99-yuxa-ekhm
5
vulnerability VCID-8v5e-zud2-g7em
6
vulnerability VCID-8wkk-84ky-17ak
7
vulnerability VCID-951j-w95x-83g8
8
vulnerability VCID-9gu8-dgkr-sua3
9
vulnerability VCID-ax8a-2g7j-6ya2
10
vulnerability VCID-basq-jjsf-3fbd
11
vulnerability VCID-bmwk-nutp-r3fs
12
vulnerability VCID-d42u-s7za-a3ad
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-p71t-er3d-9fdn
18
vulnerability VCID-q7nt-b3s9-9kf6
19
vulnerability VCID-r52t-hx1j-ufa1
20
vulnerability VCID-th3f-wx1q-eba5
21
vulnerability VCID-x2xm-hpc2-uubq
22
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.1
2
url pkg:pypi/plone@5.2.2
purl pkg:pypi/plone@5.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-eu4z-htaq-c3d6
9
vulnerability VCID-exan-4j3e-2qeh
10
vulnerability VCID-fdpc-runu-ekah
11
vulnerability VCID-p71t-er3d-9fdn
12
vulnerability VCID-q7nt-b3s9-9kf6
13
vulnerability VCID-r52t-hx1j-ufa1
14
vulnerability VCID-th3f-wx1q-eba5
15
vulnerability VCID-x2xm-hpc2-uubq
16
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.2
aliases CVE-2020-7940, GHSA-cw58-gpgw-hwx2, PYSEC-2020-89
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8wkk-84ky-17ak
6
url VCID-9gu8-dgkr-sua3
vulnerability_id VCID-9gu8-dgkr-sua3
summary An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7936.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7936.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-7936
reference_id
reference_type
scores
0
value 0.0034
scoring_system epss
scoring_elements 0.57038
published_at 2026-06-06T12:55:00Z
1
value 0.0034
scoring_system epss
scoring_elements 0.5703
published_at 2026-06-05T12:55:00Z
2
value 0.0034
scoring_system epss
scoring_elements 0.56978
published_at 2026-06-04T12:55:00Z
3
value 0.0034
scoring_system epss
scoring_elements 0.57025
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-7936
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-85.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-85.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-7936
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-7936
5
reference_url https://plone.org/security/hotfix/20200121
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121
6
reference_url https://plone.org/security/hotfix/20200121/an-open-redirection-on-the-login-form-and-possibly-other-places
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121/an-open-redirection-on-the-login-form-and-possibly-other-places
7
reference_url https://www.openwall.com/lists/oss-security/2020/01/22/1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2020/01/22/1
8
reference_url http://www.openwall.com/lists/oss-security/2020/01/24/1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/01/24/1
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1798205
reference_id 1798205
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1798205
10
reference_url https://github.com/advisories/GHSA-82j9-wfcf-9v2h
reference_id GHSA-82j9-wfcf-9v2h
reference_type
scores
url https://github.com/advisories/GHSA-82j9-wfcf-9v2h
fixed_packages
0
url pkg:pypi/plone@5.1.7
purl pkg:pypi/plone@5.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-8wkk-84ky-17ak
6
vulnerability VCID-951j-w95x-83g8
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-d42u-s7za-a3ad
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-q7nt-b3s9-9kf6
18
vulnerability VCID-r52t-hx1j-ufa1
19
vulnerability VCID-th3f-wx1q-eba5
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.7
1
url pkg:pypi/plone@5.2.2
purl pkg:pypi/plone@5.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-eu4z-htaq-c3d6
9
vulnerability VCID-exan-4j3e-2qeh
10
vulnerability VCID-fdpc-runu-ekah
11
vulnerability VCID-p71t-er3d-9fdn
12
vulnerability VCID-q7nt-b3s9-9kf6
13
vulnerability VCID-r52t-hx1j-ufa1
14
vulnerability VCID-th3f-wx1q-eba5
15
vulnerability VCID-x2xm-hpc2-uubq
16
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.2
aliases CVE-2020-7936, GHSA-82j9-wfcf-9v2h, PYSEC-2020-85
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9gu8-dgkr-sua3
7
url VCID-ax8a-2g7j-6ya2
vulnerability_id VCID-ax8a-2g7j-6ya2
summary Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33513
reference_id
reference_type
scores
0
value 0.00302
scoring_system epss
scoring_elements 0.53895
published_at 2026-06-06T12:55:00Z
1
value 0.00302
scoring_system epss
scoring_elements 0.53882
published_at 2026-06-07T12:55:00Z
2
value 0.00302
scoring_system epss
scoring_elements 0.53887
published_at 2026-06-05T12:55:00Z
3
value 0.00302
scoring_system epss
scoring_elements 0.5383
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33513
1
reference_url https://github.com/advisories/GHSA-fj67-w3m4-rfmp
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-fj67-w3m4-rfmp
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-85.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-85.yaml
4
reference_url https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool
5
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33513
reference_id CVE-2021-33513
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33513
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33513, GHSA-fj67-w3m4-rfmp, PYSEC-2021-85
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ax8a-2g7j-6ya2
8
url VCID-basq-jjsf-3fbd
vulnerability_id VCID-basq-jjsf-3fbd
summary Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and allows an attacker to execute JavaScript in the context of the victim's browser if the victim opens a vulnerable page containing an XSS payload.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3313
reference_id
reference_type
scores
0
value 0.00444
scoring_system epss
scoring_elements 0.63745
published_at 2026-06-05T12:55:00Z
1
value 0.00444
scoring_system epss
scoring_elements 0.63744
published_at 2026-06-07T12:55:00Z
2
value 0.00444
scoring_system epss
scoring_elements 0.63752
published_at 2026-06-06T12:55:00Z
3
value 0.00444
scoring_system epss
scoring_elements 0.63703
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3313
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-78.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-78.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3313
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3313
4
reference_url https://plone.org/download/releases/5.2.3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/download/releases/5.2.3
5
reference_url https://plone.org/security/hotfix/20210518
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518
6
reference_url https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html
7
reference_url https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname
8
reference_url https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt
9
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
10
reference_url https://github.com/advisories/GHSA-hprr-4vfq-fcxw
reference_id GHSA-hprr-4vfq-fcxw
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hprr-4vfq-fcxw
fixed_packages
0
url pkg:pypi/plone@5.2.4
purl pkg:pypi/plone@5.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-ax8a-2g7j-6ya2
4
vulnerability VCID-d42u-s7za-a3ad
5
vulnerability VCID-eu4z-htaq-c3d6
6
vulnerability VCID-p71t-er3d-9fdn
7
vulnerability VCID-q7nt-b3s9-9kf6
8
vulnerability VCID-r52t-hx1j-ufa1
9
vulnerability VCID-th3f-wx1q-eba5
10
vulnerability VCID-x2xm-hpc2-uubq
11
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.4
aliases CVE-2021-3313, GHSA-hprr-4vfq-fcxw, PYSEC-2021-78
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-basq-jjsf-3fbd
9
url VCID-bmwk-nutp-r3fs
vulnerability_id VCID-bmwk-nutp-r3fs
summary SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7939.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7939.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-7939
reference_id
reference_type
scores
0
value 0.00405
scoring_system epss
scoring_elements 0.61336
published_at 2026-06-04T12:55:00Z
1
value 0.00405
scoring_system epss
scoring_elements 0.61378
published_at 2026-06-07T12:55:00Z
2
value 0.00405
scoring_system epss
scoring_elements 0.61392
published_at 2026-06-06T12:55:00Z
3
value 0.00405
scoring_system epss
scoring_elements 0.61384
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-7939
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-88.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-88.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-7939
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-7939
5
reference_url https://plone.org/security/hotfix/20200121
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121
6
reference_url https://plone.org/security/hotfix/20200121/sql-injection-in-dtml-or-in-connection-objects
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121/sql-injection-in-dtml-or-in-connection-objects
7
reference_url https://www.openwall.com/lists/oss-security/2020/01/22/1
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2020/01/22/1
8
reference_url http://www.openwall.com/lists/oss-security/2020/01/24/1
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/01/24/1
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1798204
reference_id 1798204
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1798204
10
reference_url https://github.com/advisories/GHSA-hhmf-7rgg-gcw5
reference_id GHSA-hhmf-7rgg-gcw5
reference_type
scores
url https://github.com/advisories/GHSA-hhmf-7rgg-gcw5
fixed_packages
0
url pkg:pypi/plone@5.2.2
purl pkg:pypi/plone@5.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-eu4z-htaq-c3d6
9
vulnerability VCID-exan-4j3e-2qeh
10
vulnerability VCID-fdpc-runu-ekah
11
vulnerability VCID-p71t-er3d-9fdn
12
vulnerability VCID-q7nt-b3s9-9kf6
13
vulnerability VCID-r52t-hx1j-ufa1
14
vulnerability VCID-th3f-wx1q-eba5
15
vulnerability VCID-x2xm-hpc2-uubq
16
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.2
aliases CVE-2020-7939, GHSA-hhmf-7rgg-gcw5, PYSEC-2020-88
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bmwk-nutp-r3fs
10
url VCID-d42u-s7za-a3ad
vulnerability_id VCID-d42u-s7za-a3ad
summary Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33511
reference_id
reference_type
scores
0
value 0.00276
scoring_system epss
scoring_elements 0.513
published_at 2026-06-05T12:55:00Z
1
value 0.00276
scoring_system epss
scoring_elements 0.51284
published_at 2026-06-07T12:55:00Z
2
value 0.00276
scoring_system epss
scoring_elements 0.51238
published_at 2026-06-04T12:55:00Z
3
value 0.00276
scoring_system epss
scoring_elements 0.51305
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33511
1
reference_url https://github.com/advisories/GHSA-gc9g-67cq-p7v4
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-gc9g-67cq-p7v4
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-83.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-83.yaml
4
reference_url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser
5
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33511
reference_id CVE-2021-33511
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33511
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33511, GHSA-gc9g-67cq-p7v4, PYSEC-2021-83
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d42u-s7za-a3ad
11
url VCID-d6hq-qfek-1bgu
vulnerability_id VCID-d6hq-qfek-1bgu
summary 
User information disclosure
A vulnerability allows unauthorized disclosure of registered user information.
references
0
reference_url https://plone.org/products/plone/security/advisories/20151208-announcement
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20151208-announcement
fixed_packages
0
url pkg:pypi/plone@5.0.1
purl pkg:pypi/plone@5.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-1f3t-a46p-13ca
2
vulnerability VCID-29gf-82fr-k3h8
3
vulnerability VCID-4ttq-tacy-4ugg
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-8v5e-zud2-g7em
10
vulnerability VCID-8wkk-84ky-17ak
11
vulnerability VCID-951j-w95x-83g8
12
vulnerability VCID-9gu8-dgkr-sua3
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-bmwk-nutp-r3fs
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-hhux-xufk-ube2
24
vulnerability VCID-j8fv-uhxw-jkcw
25
vulnerability VCID-jvvz-bafs-t7gc
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-p71t-er3d-9fdn
28
vulnerability VCID-pzke-4by2-w3hk
29
vulnerability VCID-q7nt-b3s9-9kf6
30
vulnerability VCID-r52t-hx1j-ufa1
31
vulnerability VCID-th3f-wx1q-eba5
32
vulnerability VCID-x2xm-hpc2-uubq
33
vulnerability VCID-yfkz-3xu3-vyc9
34
vulnerability VCID-z4jt-v88h-77er
35
vulnerability VCID-zwnj-revc-vbd6
36
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.1
aliases GMS-2015-51
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d6hq-qfek-1bgu
12
url VCID-edq7-7ncc-mbfx
vulnerability_id VCID-edq7-7ncc-mbfx
summary By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login form and login, then get redirected to the specific url, and then get a second redirect to the attacker website. (The specific url can be seen by inspecting the hotfix code, but we don't want to make it too easy for attackers by spelling it out here.)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000484.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000484.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000484
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41511
published_at 2026-06-07T12:55:00Z
1
value 0.00197
scoring_system epss
scoring_elements 0.41542
published_at 2026-06-06T12:55:00Z
2
value 0.00197
scoring_system epss
scoring_elements 0.41535
published_at 2026-06-05T12:55:00Z
3
value 0.00197
scoring_system epss
scoring_elements 0.41459
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000484
2
reference_url https://github.com/advisories/GHSA-xvwv-6wvx-px9x
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-xvwv-6wvx-px9x
3
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
4
reference_url https://github.com/plone/Products.CMFPlone/issues/2232
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/issues/2232
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-73.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2018-73.yaml
6
reference_url https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20171128/an-open-redirection-when-calling-a-specific-url
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1532487
reference_id 1532487
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1532487
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000484
reference_id CVE-2017-1000484
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000484
fixed_packages
0
url pkg:pypi/plone@5.1.0
purl pkg:pypi/plone@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-8wkk-84ky-17ak
6
vulnerability VCID-951j-w95x-83g8
7
vulnerability VCID-9gu8-dgkr-sua3
8
vulnerability VCID-ax8a-2g7j-6ya2
9
vulnerability VCID-basq-jjsf-3fbd
10
vulnerability VCID-bmwk-nutp-r3fs
11
vulnerability VCID-d42u-s7za-a3ad
12
vulnerability VCID-eu4z-htaq-c3d6
13
vulnerability VCID-exan-4j3e-2qeh
14
vulnerability VCID-fdpc-runu-ekah
15
vulnerability VCID-j8fv-uhxw-jkcw
16
vulnerability VCID-p71t-er3d-9fdn
17
vulnerability VCID-q7nt-b3s9-9kf6
18
vulnerability VCID-r52t-hx1j-ufa1
19
vulnerability VCID-th3f-wx1q-eba5
20
vulnerability VCID-x2xm-hpc2-uubq
21
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1.0
aliases CVE-2017-1000484, GHSA-xvwv-6wvx-px9x, PYSEC-2018-73
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-edq7-7ncc-mbfx
13
url VCID-eu4z-htaq-c3d6
vulnerability_id VCID-eu4z-htaq-c3d6
summary Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33510
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.30558
published_at 2026-06-05T12:55:00Z
1
value 0.0012
scoring_system epss
scoring_elements 0.30494
published_at 2026-06-07T12:55:00Z
2
value 0.0012
scoring_system epss
scoring_elements 0.30484
published_at 2026-06-04T12:55:00Z
3
value 0.0012
scoring_system epss
scoring_elements 0.30525
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33510
1
reference_url https://github.com/advisories/GHSA-4mg4-wvmx-5332
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-4mg4-wvmx-5332
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-82.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-82.yaml
4
reference_url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url
5
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33510
reference_id CVE-2021-33510
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33510
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33510, GHSA-4mg4-wvmx-5332, PYSEC-2021-82
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eu4z-htaq-c3d6
14
url VCID-exan-4j3e-2qeh
vulnerability_id VCID-exan-4j3e-2qeh
summary Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-28734
reference_id
reference_type
scores
0
value 0.00484
scoring_system epss
scoring_elements 0.65676
published_at 2026-06-07T12:55:00Z
1
value 0.00484
scoring_system epss
scoring_elements 0.65624
published_at 2026-06-04T12:55:00Z
2
value 0.00484
scoring_system epss
scoring_elements 0.65687
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-28734
1
reference_url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
2
reference_url https://github.com/advisories/GHSA-wq6x-g685-w5f2
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-wq6x-g685-w5f2
3
reference_url https://github.com/plone/Products.CMFPlone/issues/3209
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/issues/3209
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-246.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-246.yaml
5
reference_url https://www.misakikata.com/codes/plone/python-en.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.misakikata.com/codes/plone/python-en.html
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-28734
reference_id CVE-2020-28734
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-28734
fixed_packages
0
url pkg:pypi/plone@5.2.3
purl pkg:pypi/plone@5.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8v5e-zud2-g7em
4
vulnerability VCID-ax8a-2g7j-6ya2
5
vulnerability VCID-basq-jjsf-3fbd
6
vulnerability VCID-d42u-s7za-a3ad
7
vulnerability VCID-eu4z-htaq-c3d6
8
vulnerability VCID-p71t-er3d-9fdn
9
vulnerability VCID-q7nt-b3s9-9kf6
10
vulnerability VCID-r52t-hx1j-ufa1
11
vulnerability VCID-th3f-wx1q-eba5
12
vulnerability VCID-x2xm-hpc2-uubq
13
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3
aliases CVE-2020-28734, GHSA-wq6x-g685-w5f2, PYSEC-2020-246
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-exan-4j3e-2qeh
15
url VCID-fdpc-runu-ekah
vulnerability_id VCID-fdpc-runu-ekah
summary Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-28735
reference_id
reference_type
scores
0
value 0.00484
scoring_system epss
scoring_elements 0.65676
published_at 2026-06-07T12:55:00Z
1
value 0.00484
scoring_system epss
scoring_elements 0.65624
published_at 2026-06-04T12:55:00Z
2
value 0.00484
scoring_system epss
scoring_elements 0.65687
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-28735
1
reference_url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt
2
reference_url https://github.com/advisories/GHSA-x7wf-5mjc-6x76
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-x7wf-5mjc-6x76
3
reference_url https://github.com/plone/Products.CMFPlone/issues/3209
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/issues/3209
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-247.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-247.yaml
5
reference_url https://www.misakikata.com/codes/plone/python-en.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.misakikata.com/codes/plone/python-en.html
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-28735
reference_id CVE-2020-28735
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-28735
fixed_packages
0
url pkg:pypi/plone@5.2.3
purl pkg:pypi/plone@5.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8v5e-zud2-g7em
4
vulnerability VCID-ax8a-2g7j-6ya2
5
vulnerability VCID-basq-jjsf-3fbd
6
vulnerability VCID-d42u-s7za-a3ad
7
vulnerability VCID-eu4z-htaq-c3d6
8
vulnerability VCID-p71t-er3d-9fdn
9
vulnerability VCID-q7nt-b3s9-9kf6
10
vulnerability VCID-r52t-hx1j-ufa1
11
vulnerability VCID-th3f-wx1q-eba5
12
vulnerability VCID-x2xm-hpc2-uubq
13
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.3
aliases CVE-2020-28735, GHSA-x7wf-5mjc-6x76, PYSEC-2020-247
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fdpc-runu-ekah
16
url VCID-h4kd-eh8g-gude
vulnerability_id VCID-h4kd-eh8g-gude
summary Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7316.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7316.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-7316
reference_id
reference_type
scores
0
value 0.0051
scoring_system epss
scoring_elements 0.66816
published_at 2026-06-06T12:55:00Z
1
value 0.0051
scoring_system epss
scoring_elements 0.66767
published_at 2026-06-04T12:55:00Z
2
value 0.0051
scoring_system epss
scoring_elements 0.66808
published_at 2026-06-05T12:55:00Z
3
value 0.0051
scoring_system epss
scoring_elements 0.66801
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-7316
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1264788
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1264788
3
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
4
reference_url https://github.com/plone/Products.CMFPlone/commit/3da710a2cd68587f0bf34f2e7ea1167d6eeee087
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/3da710a2cd68587f0bf34f2e7ea1167d6eeee087
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-53.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-53.yaml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-7316
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-7316
7
reference_url https://plone.org/security/20150910/
reference_id
reference_type
scores
url https://plone.org/security/20150910/
8
reference_url https://plone.org/security/20150910/non-persistent-xss-in-plone
reference_id
reference_type
scores
url https://plone.org/security/20150910/non-persistent-xss-in-plone
9
reference_url https://plone.org/security/hotfix/20150910/non-persistent-xss-in-plone
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20150910/non-persistent-xss-in-plone
10
reference_url https://pypi.org/project/Products.PloneHotfix20150910
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://pypi.org/project/Products.PloneHotfix20150910
11
reference_url https://pypi.python.org/pypi/Products.PloneHotfix20150910
reference_id
reference_type
scores
url https://pypi.python.org/pypi/Products.PloneHotfix20150910
12
reference_url http://www.openwall.com/lists/oss-security/2015/09/22/14
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2015/09/22/14
13
reference_url https://github.com/advisories/GHSA-vf8g-m3vq-6p4p
reference_id GHSA-vf8g-m3vq-6p4p
reference_type
scores
url https://github.com/advisories/GHSA-vf8g-m3vq-6p4p
fixed_packages
0
url pkg:pypi/plone@5.0rc2
purl pkg:pypi/plone@5.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-6568-4ert-1bau
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-8wkk-84ky-17ak
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-d6hq-qfek-1bgu
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-th3f-wx1q-eba5
23
vulnerability VCID-x2xm-hpc2-uubq
24
vulnerability VCID-z4jt-v88h-77er
25
vulnerability VCID-zwnj-revc-vbd6
26
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0rc2
aliases CVE-2015-7316, GHSA-vf8g-m3vq-6p4p, PYSEC-2017-53
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h4kd-eh8g-gude
17
url VCID-j8fv-uhxw-jkcw
vulnerability_id VCID-j8fv-uhxw-jkcw
summary A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7941.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7941.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-7941
reference_id
reference_type
scores
0
value 0.00619
scoring_system epss
scoring_elements 0.70435
published_at 2026-06-07T12:55:00Z
1
value 0.00619
scoring_system epss
scoring_elements 0.70403
published_at 2026-06-04T12:55:00Z
2
value 0.00619
scoring_system epss
scoring_elements 0.70444
published_at 2026-06-05T12:55:00Z
3
value 0.00619
scoring_system epss
scoring_elements 0.70453
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-7941
2
reference_url https://github.com/plone/plone.app.contenttypes
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/plone/plone.app.contenttypes
3
reference_url https://github.com/plone/plone.app.contenttypes/blob/master/CHANGES.rst?plain=1#L372-L374
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/plone/plone.app.contenttypes/blob/master/CHANGES.rst?plain=1#L372-L374
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-90.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2020-90.yaml
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-7941
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-7941
6
reference_url https://plone.org/security/hotfix/20200121
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121
7
reference_url https://plone.org/security/hotfix/20200121/privilege-escalation-for-overwriting-content
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20200121/privilege-escalation-for-overwriting-content
8
reference_url https://www.openwall.com/lists/oss-security/2020/01/22/1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2020/01/22/1
9
reference_url http://www.openwall.com/lists/oss-security/2020/01/24/1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/01/24/1
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1798201
reference_id 1798201
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1798201
11
reference_url https://github.com/advisories/GHSA-w6g9-xccc-347h
reference_id GHSA-w6g9-xccc-347h
reference_type
scores
url https://github.com/advisories/GHSA-w6g9-xccc-347h
fixed_packages
0
url pkg:pypi/plone@5.2.2
purl pkg:pypi/plone@5.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-ax8a-2g7j-6ya2
6
vulnerability VCID-basq-jjsf-3fbd
7
vulnerability VCID-d42u-s7za-a3ad
8
vulnerability VCID-eu4z-htaq-c3d6
9
vulnerability VCID-exan-4j3e-2qeh
10
vulnerability VCID-fdpc-runu-ekah
11
vulnerability VCID-p71t-er3d-9fdn
12
vulnerability VCID-q7nt-b3s9-9kf6
13
vulnerability VCID-r52t-hx1j-ufa1
14
vulnerability VCID-th3f-wx1q-eba5
15
vulnerability VCID-x2xm-hpc2-uubq
16
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.2
aliases CVE-2020-7941, GHSA-w6g9-xccc-347h, PYSEC-2020-90
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j8fv-uhxw-jkcw
18
url VCID-p71t-er3d-9fdn
vulnerability_id VCID-p71t-er3d-9fdn
summary Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33512
reference_id
reference_type
scores
0
value 0.00302
scoring_system epss
scoring_elements 0.53895
published_at 2026-06-06T12:55:00Z
1
value 0.00302
scoring_system epss
scoring_elements 0.53882
published_at 2026-06-07T12:55:00Z
2
value 0.00302
scoring_system epss
scoring_elements 0.53887
published_at 2026-06-05T12:55:00Z
3
value 0.00302
scoring_system epss
scoring_elements 0.5383
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33512
1
reference_url https://github.com/advisories/GHSA-hm2h-f456-6j88
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-hm2h-f456-6j88
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-84.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-84.yaml
3
reference_url https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html
4
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33512
reference_id CVE-2021-33512
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33512
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33512, GHSA-hm2h-f456-6j88, PYSEC-2021-84
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p71t-er3d-9fdn
19
url VCID-pzke-4by2-w3hk
vulnerability_id VCID-pzke-4by2-w3hk
summary Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4042
reference_id
reference_type
scores
0
value 0.0023
scoring_system epss
scoring_elements 0.45909
published_at 2026-06-04T12:55:00Z
1
value 0.0023
scoring_system epss
scoring_elements 0.45961
published_at 2026-06-07T12:55:00Z
2
value 0.0023
scoring_system epss
scoring_elements 0.45981
published_at 2026-06-06T12:55:00Z
3
value 0.0023
scoring_system epss
scoring_elements 0.45978
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4042
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-56.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-56.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4042
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4042
4
reference_url https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content
5
reference_url http://www.openwall.com/lists/oss-security/2016/04/20/2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2016/04/20/2
6
reference_url https://github.com/advisories/GHSA-v4vj-49m5-wjhw
reference_id GHSA-v4vj-49m5-wjhw
reference_type
scores
url https://github.com/advisories/GHSA-v4vj-49m5-wjhw
fixed_packages
0
url pkg:pypi/plone@5.0.5
purl pkg:pypi/plone@5.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-1f3t-a46p-13ca
2
vulnerability VCID-29gf-82fr-k3h8
3
vulnerability VCID-4ttq-tacy-4ugg
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-8v5e-zud2-g7em
10
vulnerability VCID-8wkk-84ky-17ak
11
vulnerability VCID-951j-w95x-83g8
12
vulnerability VCID-9gu8-dgkr-sua3
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-bmwk-nutp-r3fs
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-hhux-xufk-ube2
24
vulnerability VCID-j8fv-uhxw-jkcw
25
vulnerability VCID-jvvz-bafs-t7gc
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-p71t-er3d-9fdn
28
vulnerability VCID-pzke-4by2-w3hk
29
vulnerability VCID-q7nt-b3s9-9kf6
30
vulnerability VCID-r52t-hx1j-ufa1
31
vulnerability VCID-th3f-wx1q-eba5
32
vulnerability VCID-x2xm-hpc2-uubq
33
vulnerability VCID-yfkz-3xu3-vyc9
34
vulnerability VCID-z4jt-v88h-77er
35
vulnerability VCID-zwnj-revc-vbd6
36
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.5
1
url pkg:pypi/plone@5.1a2
purl pkg:pypi/plone@5.1a2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-6568-4ert-1bau
5
vulnerability VCID-69ps-uetw-y3gf
6
vulnerability VCID-8rp3-p3qe-x7ej
7
vulnerability VCID-8v5e-zud2-g7em
8
vulnerability VCID-8wkk-84ky-17ak
9
vulnerability VCID-951j-w95x-83g8
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-ax8a-2g7j-6ya2
12
vulnerability VCID-basq-jjsf-3fbd
13
vulnerability VCID-bmwk-nutp-r3fs
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-edq7-7ncc-mbfx
17
vulnerability VCID-eu4z-htaq-c3d6
18
vulnerability VCID-exan-4j3e-2qeh
19
vulnerability VCID-fdpc-runu-ekah
20
vulnerability VCID-j8fv-uhxw-jkcw
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-q7nt-b3s9-9kf6
23
vulnerability VCID-r52t-hx1j-ufa1
24
vulnerability VCID-th3f-wx1q-eba5
25
vulnerability VCID-x2xm-hpc2-uubq
26
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1a2
aliases CVE-2016-4042, GHSA-v4vj-49m5-wjhw, PYSEC-2017-56
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pzke-4by2-w3hk
20
url VCID-q7nt-b3s9-9kf6
vulnerability_id VCID-q7nt-b3s9-9kf6
summary Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33507
reference_id
reference_type
scores
0
value 0.00285
scoring_system epss
scoring_elements 0.52244
published_at 2026-06-04T12:55:00Z
1
value 0.00285
scoring_system epss
scoring_elements 0.52292
published_at 2026-06-07T12:55:00Z
2
value 0.00285
scoring_system epss
scoring_elements 0.52311
published_at 2026-06-06T12:55:00Z
3
value 0.00285
scoring_system epss
scoring_elements 0.52304
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33507
1
reference_url https://github.com/advisories/GHSA-35rg-466w-77h3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-35rg-466w-77h3
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-79.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-79.yaml
3
reference_url https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots
4
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33507
reference_id CVE-2021-33507
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33507
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33507, GHSA-35rg-466w-77h3, PYSEC-2021-79
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q7nt-b3s9-9kf6
21
url VCID-r52t-hx1j-ufa1
vulnerability_id VCID-r52t-hx1j-ufa1
summary Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33508
reference_id
reference_type
scores
0
value 0.00272
scoring_system epss
scoring_elements 0.50921
published_at 2026-06-05T12:55:00Z
1
value 0.00272
scoring_system epss
scoring_elements 0.50906
published_at 2026-06-07T12:55:00Z
2
value 0.00272
scoring_system epss
scoring_elements 0.50859
published_at 2026-06-04T12:55:00Z
3
value 0.00272
scoring_system epss
scoring_elements 0.50926
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33508
1
reference_url https://github.com/advisories/GHSA-rmpv-rcp6-v8wc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-rmpv-rcp6-v8wc
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-80.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-80.yaml
4
reference_url https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname
5
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33508
reference_id CVE-2021-33508
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33508
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33508, GHSA-rmpv-rcp6-v8wc, PYSEC-2021-80
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r52t-hx1j-ufa1
22
url VCID-th3f-wx1q-eba5
vulnerability_id VCID-th3f-wx1q-eba5
summary 
Phone information disclosure vulnerability
Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-22889
reference_id
reference_type
scores
0
value 0.00554
scoring_system epss
scoring_elements 0.68484
published_at 2026-06-06T12:55:00Z
1
value 0.00554
scoring_system epss
scoring_elements 0.68477
published_at 2026-06-07T12:55:00Z
2
value 0.00554
scoring_system epss
scoring_elements 0.68476
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-22889
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-22889
reference_id CVE-2024-22889
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-22889
3
reference_url https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9
reference_id CVE-2024-22889-PLONE-V6.0.9
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-07T16:30:42Z/
url https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9
4
reference_url https://github.com/advisories/GHSA-xg5p-8wg5-rhxm
reference_id GHSA-xg5p-8wg5-rhxm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xg5p-8wg5-rhxm
fixed_packages
0
url pkg:pypi/plone@6.0.10
purl pkg:pypi/plone@6.0.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@6.0.10
aliases CVE-2024-22889, GHSA-xg5p-8wg5-rhxm
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-th3f-wx1q-eba5
23
url VCID-wuas-tkd4-rkd4
vulnerability_id VCID-wuas-tkd4-rkd4
summary Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7315.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7315.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-7315
reference_id
reference_type
scores
0
value 0.00436
scoring_system epss
scoring_elements 0.6331
published_at 2026-06-04T12:55:00Z
1
value 0.00436
scoring_system epss
scoring_elements 0.63351
published_at 2026-06-07T12:55:00Z
2
value 0.00436
scoring_system epss
scoring_elements 0.63362
published_at 2026-06-06T12:55:00Z
3
value 0.00436
scoring_system epss
scoring_elements 0.63354
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-7315
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1264791
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1264791
3
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone
4
reference_url https://github.com/plone/Products.CMFPlone/commit/1845b0a92312291811b68907bf2aa0fb448c4016
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/1845b0a92312291811b68907bf2aa0fb448c4016
5
reference_url https://github.com/plone/Products.CMFPlone/commit/9f0111f85cd14f3f067044b59b93e2856c99d542
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Products.CMFPlone/commit/9f0111f85cd14f3f067044b59b93e2856c99d542
6
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-52.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-52.yaml
7
reference_url https://github.com/zopefoundation/Products.CMFCore/commit/e1d981bfa14b664317285f0f36498f4be4a23406
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/zopefoundation/Products.CMFCore/commit/e1d981bfa14b664317285f0f36498f4be4a23406
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-7315
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-7315
9
reference_url https://plone.org/security/20150910
reference_id
reference_type
scores
url https://plone.org/security/20150910
10
reference_url https://plone.org/security/20150910/anonymous-is-able-to-create-plone-members
reference_id
reference_type
scores
url https://plone.org/security/20150910/anonymous-is-able-to-create-plone-members
11
reference_url https://plone.org/security/hotfix/20150910/anonymous-is-able-to-create-plone-members
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20150910/anonymous-is-able-to-create-plone-members
12
reference_url https://pypi.org/project/Products.PloneHotfix20150910
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://pypi.org/project/Products.PloneHotfix20150910
13
reference_url https://pypi.python.org/pypi/Products.PloneHotfix20150910
reference_id
reference_type
scores
url https://pypi.python.org/pypi/Products.PloneHotfix20150910
14
reference_url http://www.openwall.com/lists/oss-security/2015/09/22/13
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2015/09/22/13
15
reference_url https://github.com/advisories/GHSA-984m-rj28-8c6x
reference_id GHSA-984m-rj28-8c6x
reference_type
scores
url https://github.com/advisories/GHSA-984m-rj28-8c6x
fixed_packages
0
url pkg:pypi/plone@5.0rc2
purl pkg:pypi/plone@5.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-6568-4ert-1bau
2
vulnerability VCID-69ps-uetw-y3gf
3
vulnerability VCID-8rp3-p3qe-x7ej
4
vulnerability VCID-8v5e-zud2-g7em
5
vulnerability VCID-8wkk-84ky-17ak
6
vulnerability VCID-9gu8-dgkr-sua3
7
vulnerability VCID-ax8a-2g7j-6ya2
8
vulnerability VCID-basq-jjsf-3fbd
9
vulnerability VCID-bmwk-nutp-r3fs
10
vulnerability VCID-d42u-s7za-a3ad
11
vulnerability VCID-d6hq-qfek-1bgu
12
vulnerability VCID-edq7-7ncc-mbfx
13
vulnerability VCID-eu4z-htaq-c3d6
14
vulnerability VCID-exan-4j3e-2qeh
15
vulnerability VCID-fdpc-runu-ekah
16
vulnerability VCID-j8fv-uhxw-jkcw
17
vulnerability VCID-jvvz-bafs-t7gc
18
vulnerability VCID-p71t-er3d-9fdn
19
vulnerability VCID-pzke-4by2-w3hk
20
vulnerability VCID-q7nt-b3s9-9kf6
21
vulnerability VCID-r52t-hx1j-ufa1
22
vulnerability VCID-th3f-wx1q-eba5
23
vulnerability VCID-x2xm-hpc2-uubq
24
vulnerability VCID-z4jt-v88h-77er
25
vulnerability VCID-zwnj-revc-vbd6
26
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0rc2
aliases CVE-2015-7315, GHSA-984m-rj28-8c6x, PYSEC-2017-52
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wuas-tkd4-rkd4
24
url VCID-x2xm-hpc2-uubq
vulnerability_id VCID-x2xm-hpc2-uubq
summary Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33509
reference_id
reference_type
scores
0
value 0.00846
scoring_system epss
scoring_elements 0.75182
published_at 2026-06-04T12:55:00Z
1
value 0.00846
scoring_system epss
scoring_elements 0.75207
published_at 2026-06-07T12:55:00Z
2
value 0.00846
scoring_system epss
scoring_elements 0.75215
published_at 2026-06-06T12:55:00Z
3
value 0.00846
scoring_system epss
scoring_elements 0.75211
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33509
1
reference_url https://github.com/advisories/GHSA-hm2p-fhwx-9285
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
3
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-hm2p-fhwx-9285
2
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-81.yaml
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-81.yaml
4
reference_url https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script
5
reference_url http://www.openwall.com/lists/oss-security/2021/05/22/1
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2021/05/22/1
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33509
reference_id CVE-2021-33509
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33509
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33509, GHSA-hm2p-fhwx-9285, PYSEC-2021-81
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x2xm-hpc2-uubq
25
url VCID-z4jt-v88h-77er
vulnerability_id VCID-z4jt-v88h-77er
summary An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.2, 5.1.1 5.1, 5.0rc3, 5.0rc2, 5.0rc1, 5.0.9, 5.0.8, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.10, 5.0.1, 5.0, 4.3.9, 4.3.8, 4.3.7, 4.3.6, 4.3.5, 4.3.4, 4.3.3, 4.3.20, 4 allows attacker to access sensitive information via the RSS feed protlet.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33926
reference_id
reference_type
scores
0
value 0.00501
scoring_system epss
scoring_elements 0.66376
published_at 2026-06-04T12:55:00Z
1
value 0.00501
scoring_system epss
scoring_elements 0.66408
published_at 2026-06-07T12:55:00Z
2
value 0.00501
scoring_system epss
scoring_elements 0.66424
published_at 2026-06-06T12:55:00Z
3
value 0.00501
scoring_system epss
scoring_elements 0.66416
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33926
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2023-289.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2023-289.yaml
3
reference_url https://github.com/s-kustm/Subodh/blob/master/Plone%205.2.4%20Vulnerable%20to%20bilend%20SSRF.pdf
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-19T14:12:55Z/
url https://github.com/s-kustm/Subodh/blob/master/Plone%205.2.4%20Vulnerable%20to%20bilend%20SSRF.pdf
4
reference_url https://plone.org/security/hotfix/20210518
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-19T14:12:55Z/
url https://plone.org/security/hotfix/20210518
5
reference_url https://plone.org/security/hotfix/20210518/blind-ssrf-via-feedparser-accessing-an-internal-url
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-19T14:12:55Z/
url https://plone.org/security/hotfix/20210518/blind-ssrf-via-feedparser-accessing-an-internal-url
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33926
reference_id CVE-2021-33926
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33926
7
reference_url https://github.com/advisories/GHSA-47p5-p3jw-w78w
reference_id GHSA-47p5-p3jw-w78w
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-47p5-p3jw-w78w
fixed_packages
0
url pkg:pypi/plone@5.2.5
purl pkg:pypi/plone@5.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ttq-tacy-4ugg
1
vulnerability VCID-th3f-wx1q-eba5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.2.5
aliases CVE-2021-33926, GHSA-47p5-p3jw-w78w, PYSEC-2023-289
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z4jt-v88h-77er
26
url VCID-zwnj-revc-vbd6
vulnerability_id VCID-zwnj-revc-vbd6
summary Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4041
reference_id
reference_type
scores
0
value 0.00429
scoring_system epss
scoring_elements 0.62801
published_at 2026-06-04T12:55:00Z
1
value 0.00429
scoring_system epss
scoring_elements 0.62844
published_at 2026-06-07T12:55:00Z
2
value 0.00429
scoring_system epss
scoring_elements 0.62853
published_at 2026-06-06T12:55:00Z
3
value 0.00429
scoring_system epss
scoring_elements 0.62845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4041
1
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-55.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-55.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4041
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4041
4
reference_url https://plone.org/security/hotfix/20160419/privilege-escalation-in-webdav
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20160419/privilege-escalation-in-webdav
5
reference_url http://www.openwall.com/lists/oss-security/2016/04/20/1
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2016/04/20/1
6
reference_url https://github.com/advisories/GHSA-qqgj-22gr-73vx
reference_id GHSA-qqgj-22gr-73vx
reference_type
scores
url https://github.com/advisories/GHSA-qqgj-22gr-73vx
fixed_packages
0
url pkg:pypi/plone@5.0.5
purl pkg:pypi/plone@5.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17w2-gd3m-2qff
1
vulnerability VCID-1f3t-a46p-13ca
2
vulnerability VCID-29gf-82fr-k3h8
3
vulnerability VCID-4ttq-tacy-4ugg
4
vulnerability VCID-5n6e-cha8-nyb8
5
vulnerability VCID-5ry7-xy6b-5fag
6
vulnerability VCID-6568-4ert-1bau
7
vulnerability VCID-69ps-uetw-y3gf
8
vulnerability VCID-8rp3-p3qe-x7ej
9
vulnerability VCID-8v5e-zud2-g7em
10
vulnerability VCID-8wkk-84ky-17ak
11
vulnerability VCID-951j-w95x-83g8
12
vulnerability VCID-9gu8-dgkr-sua3
13
vulnerability VCID-ax8a-2g7j-6ya2
14
vulnerability VCID-ay85-551m-vfej
15
vulnerability VCID-basq-jjsf-3fbd
16
vulnerability VCID-bmwk-nutp-r3fs
17
vulnerability VCID-d42u-s7za-a3ad
18
vulnerability VCID-dg61-tw4u-dbcc
19
vulnerability VCID-edq7-7ncc-mbfx
20
vulnerability VCID-eu4z-htaq-c3d6
21
vulnerability VCID-exan-4j3e-2qeh
22
vulnerability VCID-fdpc-runu-ekah
23
vulnerability VCID-hhux-xufk-ube2
24
vulnerability VCID-j8fv-uhxw-jkcw
25
vulnerability VCID-jvvz-bafs-t7gc
26
vulnerability VCID-mn7t-zgfw-tqfw
27
vulnerability VCID-p71t-er3d-9fdn
28
vulnerability VCID-pzke-4by2-w3hk
29
vulnerability VCID-q7nt-b3s9-9kf6
30
vulnerability VCID-r52t-hx1j-ufa1
31
vulnerability VCID-th3f-wx1q-eba5
32
vulnerability VCID-x2xm-hpc2-uubq
33
vulnerability VCID-yfkz-3xu3-vyc9
34
vulnerability VCID-z4jt-v88h-77er
35
vulnerability VCID-zwnj-revc-vbd6
36
vulnerability VCID-zy2g-gzmk-1qcz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.5
1
url pkg:pypi/plone@5.1a2
purl pkg:pypi/plone@5.1a2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-6568-4ert-1bau
5
vulnerability VCID-69ps-uetw-y3gf
6
vulnerability VCID-8rp3-p3qe-x7ej
7
vulnerability VCID-8v5e-zud2-g7em
8
vulnerability VCID-8wkk-84ky-17ak
9
vulnerability VCID-951j-w95x-83g8
10
vulnerability VCID-9gu8-dgkr-sua3
11
vulnerability VCID-ax8a-2g7j-6ya2
12
vulnerability VCID-basq-jjsf-3fbd
13
vulnerability VCID-bmwk-nutp-r3fs
14
vulnerability VCID-d42u-s7za-a3ad
15
vulnerability VCID-dg61-tw4u-dbcc
16
vulnerability VCID-edq7-7ncc-mbfx
17
vulnerability VCID-eu4z-htaq-c3d6
18
vulnerability VCID-exan-4j3e-2qeh
19
vulnerability VCID-fdpc-runu-ekah
20
vulnerability VCID-j8fv-uhxw-jkcw
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-q7nt-b3s9-9kf6
23
vulnerability VCID-r52t-hx1j-ufa1
24
vulnerability VCID-th3f-wx1q-eba5
25
vulnerability VCID-x2xm-hpc2-uubq
26
vulnerability VCID-z4jt-v88h-77er
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.1a2
aliases CVE-2016-4041, GHSA-qqgj-22gr-73vx, PYSEC-2017-55
risk_score 3.3
exploitability 0.5
weighted_severity 6.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zwnj-revc-vbd6
27
url VCID-zy2g-gzmk-1qcz
vulnerability_id VCID-zy2g-gzmk-1qcz
summary Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
references
0
reference_url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7140.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7140.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7140
reference_id
reference_type
scores
0
value 0.00491
scoring_system epss
scoring_elements 0.65955
published_at 2026-06-04T12:55:00Z
1
value 0.00491
scoring_system epss
scoring_elements 0.66004
published_at 2026-06-07T12:55:00Z
2
value 0.00491
scoring_system epss
scoring_elements 0.66019
published_at 2026-06-06T12:55:00Z
3
value 0.00491
scoring_system epss
scoring_elements 0.66007
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7140
3
reference_url http://seclists.org/fulldisclosure/2016/Oct/80
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2016/Oct/80
4
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/plone/Plone
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-63.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2017-63.yaml
6
reference_url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-zope2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://plone.org/security/hotfix/20160830/non-persistent-xss-in-zope2
7
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/4
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2016/09/05/4
8
reference_url http://www.openwall.com/lists/oss-security/2016/09/05/5
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2016/09/05/5
9
reference_url http://www.securityfocus.com/archive/1/539572/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/539572/100/0/threaded
10
reference_url http://www.securityfocus.com/bid/92752
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/92752
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1373466
reference_id 1373466
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1373466
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-7140
reference_id CVE-2016-7140
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-7140
13
reference_url https://github.com/advisories/GHSA-chvw-gjxf-f8mc
reference_id GHSA-chvw-gjxf-f8mc
reference_type
scores
url https://github.com/advisories/GHSA-chvw-gjxf-f8mc
fixed_packages
0
url pkg:pypi/plone@5.0.7
purl pkg:pypi/plone@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f3t-a46p-13ca
1
vulnerability VCID-29gf-82fr-k3h8
2
vulnerability VCID-4ttq-tacy-4ugg
3
vulnerability VCID-5ry7-xy6b-5fag
4
vulnerability VCID-69ps-uetw-y3gf
5
vulnerability VCID-8rp3-p3qe-x7ej
6
vulnerability VCID-8v5e-zud2-g7em
7
vulnerability VCID-8wkk-84ky-17ak
8
vulnerability VCID-951j-w95x-83g8
9
vulnerability VCID-9gu8-dgkr-sua3
10
vulnerability VCID-ax8a-2g7j-6ya2
11
vulnerability VCID-basq-jjsf-3fbd
12
vulnerability VCID-bmwk-nutp-r3fs
13
vulnerability VCID-d42u-s7za-a3ad
14
vulnerability VCID-dg61-tw4u-dbcc
15
vulnerability VCID-edq7-7ncc-mbfx
16
vulnerability VCID-eu4z-htaq-c3d6
17
vulnerability VCID-exan-4j3e-2qeh
18
vulnerability VCID-fdpc-runu-ekah
19
vulnerability VCID-j8fv-uhxw-jkcw
20
vulnerability VCID-jvvz-bafs-t7gc
21
vulnerability VCID-p71t-er3d-9fdn
22
vulnerability VCID-pzke-4by2-w3hk
23
vulnerability VCID-q7nt-b3s9-9kf6
24
vulnerability VCID-r52t-hx1j-ufa1
25
vulnerability VCID-th3f-wx1q-eba5
26
vulnerability VCID-x2xm-hpc2-uubq
27
vulnerability VCID-z4jt-v88h-77er
28
vulnerability VCID-zwnj-revc-vbd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0.7
aliases CVE-2016-7140, GHSA-chvw-gjxf-f8mc, PYSEC-2017-63
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zy2g-gzmk-1qcz
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/plone@5.0b2