Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/plone@6.0.0a4
purl pkg:pypi/plone@6.0.0a4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.2
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-5xfx-55x4-j223
Aliases:
CVE-2024-0669
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious …
6.0.7
Vulnerable
PYSEC-2026-733
Aliases:
CVE-2006-1711
GHSA-jcwh-rj6j-vm75
Plone allows remote users to modify arbitrary portraits Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) … There are no reported fixed by versions.
PYSEC-2026-1798
Aliases:
CVE-2024-22889
GHSA-xg5p-8wg5-rhxm
Phone information disclosure vulnerability Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all … There are no reported fixed by versions.
PYSEC-2026-1797
Aliases:
CVE-2024-0669
GHSA-5xfx-55x4-j223
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious …
6.0.7
Vulnerable
This package is not known to fix any advisories.