Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2021-33508

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rmpv-rcp6-v8wc

Cross-site scripting in Plone Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.

gitlab/pypi/Plone/CVE-2021-33508

Cross-site scripting in Plone Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.

pypa/plone/PYSEC-2021-80

Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.

pysec/PYSEC-2021-80

Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.