Skip to content
OpenAdvisories

Package · PyPI

plone-restapi

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    GHSA-hc5c-r8m5-2gfh

    plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait

    ### Impact There is a stored cross site scripting vulnerability for SVG images uploaded in user portraits. Note that a page that uses an image tag with an SVG image as source is never vulnerable, even when the SVG image contains malicious code. To exploit the…

    plone-restapi PyPI