CVE-2021-33507
Fixed upstream EPSS <1%
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 5.2.5 |
| PyPI | products-cmfcore | 2.5.1 |
| PyPI | products-pluggableauthservice | 2.6.2 |
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| PyPI | plone |