Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/plone@6.0.7
purl pkg:pypi/plone@6.0.7
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
PYSEC-2026-733
Aliases:
CVE-2006-1711
GHSA-jcwh-rj6j-vm75
Plone allows remote users to modify arbitrary portraits Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) … There are no reported fixed by versions.
PYSEC-2026-1798
Aliases:
CVE-2024-22889
GHSA-xg5p-8wg5-rhxm
Phone information disclosure vulnerability Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-5xfx-55x4-j223
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious … CVE-2024-0669
PYSEC-2026-1797
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious … CVE-2024-0669
GHSA-5xfx-55x4-j223