Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/plone@4.0.0
purl pkg:pypi/plone@4.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-v3hp-f8qr-cf3p
Aliases:
CVE-2016-7138
Plone XSS Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, … There are no reported fixed by versions.
GHSA-22jm-p2vv-j2hc
Aliases:
CVE-2016-7136
Plone XSS z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting … There are no reported fixed by versions.
This package is not known to fix any advisories.