Skip to content
OpenAdvisories

Vendor

plone

12 known vulnerabilities.

Products

volto 3 plone.app.portlets 2 Products.isurlinportal 2 plone.app.textfield 1 plone.namedfile 1 plone.rest 1 plone.app.event 1 plone.app.dexterity 1 plone.app.contenttypes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2023-41048

    plone.namedfile vulnerable to Stored Cross Site Scripting with SVG images

    plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross site scripting vulnerability for SVG images. A security hotfix…

    plone plone.namedfile plone-namedfile PyPI