Description
Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | <= 5.2.4 | — | GHSA-rmpv-rcp6-v8wc |
| PyPI | plone | < 5.2.5 | 5.2.5 | PYSEC-2021-80 |