Description
Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | <= 5.2.4 | — | GHSA-hm2h-f456-6j88 |
| PyPI | plone | < 5.2.5 | 5.2.5 | PYSEC-2021-84 |