CVE-2017-1000482
Fixed upstream EPSS <1%
A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.
Products: plone
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.3.16 |
| PyPI | plone | 5.1.0 |
| PyPI | products-cmfplone | 4.3.17 |
| PyPI | products-cmfplone | 5.0.10 |
| PyPI | products-cmfplone | 5.1.0 |