Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/plone@5.0.0
purl pkg:pypi/plone@5.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-xvwv-6wvx-px9x
Aliases:
CVE-2017-1000484
Plone Open Redirect By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you …
5.1.0
Vulnerable
5.1.0
Vulnerable
GHSA-v3hp-f8qr-cf3p
Aliases:
CVE-2016-7138
Plone XSS Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, … There are no reported fixed by versions.
GHSA-22jm-p2vv-j2hc
Aliases:
CVE-2016-7136
Plone XSS z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting … There are no reported fixed by versions.
This package is not known to fix any advisories.