Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-0669

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5xfx-55x4-j223

A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.

gitlab/pypi/Plone/CVE-2024-0669

Improper Restriction of Rendered UI Layers or Frames A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.

pypa/plone/PYSEC-2026-1797

A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.

pysec/PYSEC-2026-1797

A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.