Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/products.cmfplone@5.0.0
purl pkg:pypi/products.cmfplone@5.0.0
Tags Ghost
Next non-vulnerable version 5.1.0
Latest non-vulnerable version 5.1.0
Risk score 2.8
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-8g72-gq68-6gqh
Aliases:
CVE-2017-1000481
Products.CMFPlone Open Redirect Vulnerability When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the …
5.0.10
Vulnerable
5.0.10
Vulnerable
GHSA-859j-668v-mrr6
Aliases:
CVE-2017-1000482
Products.CMFPlone XSS in profile home_page property A member of the Plone site could set javascript in the `home_page` property of …
5.0.10
Vulnerable
5.0.10
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-8w54-22w9-3g8f
Cross-site Scripting and Open Redirect in Products.CMFPlone ### Impact Plone is vulnerable to reflected cross site scripting and open redirect … GMS-2022-46