Description
Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | plone | <= 5.2.4 | — | GHSA-fj67-w3m4-rfmp |
| PyPI | plone | < 5.2.5 | 5.2.5 | PYSEC-2021-85 |
Medium · 5.4
CVE-2021-33513
EUVD-2021-0195GHSA-fj67-w3m4-rfmpPYSEC-2021-85
Cross-site scripting in Plone
Published May 21, 2021 · Updated Aug 3, 2024 · Assigned by mitre