Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-35959

Fixed upstream EPSS <1%

In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.

Published 2021-06-30 · CVE record · OSV

Products: plone

Fixed upstream

EcosystemPackageFixed in
PyPIplone5.2.5

Affected upstream, no fix yet

EcosystemPackage
PyPIplone