Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-29002

No fix known EPSS <1%

A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.site_title" parameter.

Published 2021-03-24 · CVE record · OSV

Products: plone

Affected upstream, no fix yet

Ecosystem	Package
PyPI	plone