Skip to content
OpenAdvisories

Package · PyPI

plone-restapi

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    GHSA-8rqh-vxpr-x77p

    plone.restapi: Stored XSS by spoofing mime type

    ### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type (`text/x-html-safe`) is the type that signifies "alread…

    plone-restapi PyPI