Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/products.cmfplone@4.3.20rc1
purl pkg:pypi/products.cmfplone@4.3.20rc1
Next non-vulnerable version 5.1.0
Latest non-vulnerable version 5.1.0
Risk score 1.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GMS-2015-35

Multiple CSRF vulnerabilities in Management Interface There are multiple CSRF (cross-site request forgery) vulnerabilities in the ZMI (Zope Management Interface). There are no reported fixed by versions.
GHSA-8w54-22w9-3g8f
Aliases:
GMS-2022-46
Cross-site Scripting and Open Redirect in Products.CMFPlone ### Impact Plone is vulnerable to reflected cross site scripting and open redirect … There are no reported fixed by versions.
This package is not known to fix any advisories.