Skip to content
OpenAdvisories

Product · plone

plone.app.textfield

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-54503

    plone.app.textfield: Stored XSS by spoofing mime type

    plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.0.2, and 4.0.1, depending on the release line, RichTextValue.output returns an unsanitized stored RichText value when m…

    plone plone.app.textfield plone-app-textfield PyPI