Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-7937

Fixed upstream EPSS <1%

An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.

Published 2020-01-23 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone5.2.2

Affected upstream, no fix yet

EcosystemPackage
PyPIplone