Description
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | >= 5.0, <= 5.2.1 | — | GHSA-8mc4-2xrc-g582 |
| PyPI | plone | >= 5.0, < 5.2.2 | 5.2.2 | PYSEC-2020-86 |