EUVD-2021-0188

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Plone CMS versions up to 5.2.4 have a stored XSS vulnerability in user input data handling.

Reporter	Title	Published	Views	Family All 13
CNNVD	Plone 跨站脚本漏洞	20 May 202100:00	–	cnnvd
CNVD	Plone cross-site scripting vulnerability (CNVD-2021-37279)	21 May 202100:00	–	cnvd
CVE	CVE-2021-3313	20 May 202115:34	–	cve
Cvelist	CVE-2021-3313	20 May 202115:34	–	cvelist
Github Security Blog	Plone XSS in User Fullname Property and File Upload	24 May 202219:02	–	github
NVD	CVE-2021-3313	20 May 202116:15	–	nvd
OpenVAS	Plone CMS <= 5.2.4 Multiple Vulnerabilities	27 May 202100:00	–	openvas
OSV	GHSA-HPRR-4VFQ-FCXW Plone XSS in User Fullname Property and File Upload	24 May 202219:02	–	osv
OSV	PYSEC-2021-78	20 May 202116:15	–	osv
Prion	Cross site scripting	20 May 202116:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "38b84b35-e9a1-30aa-8d4a-e7c29f7d33c7",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ff5342c5-eabf-33ef-8868-21e4ead14576",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
compass-security	www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt
plone	www.plone.org/download/releases/5.2.3
plone	www.plone.org/security/hotfix/20210518
openwall	www.openwall.com/lists/oss-security/2021/05/22/1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3313
github	www.github.com/plone/Plone
github	www.github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-78.yaml
plone	www.plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html
plone	www.plone.org/security/hotfix/20210518/stored-xss-from-user-fullname
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4

CVSS 23.5

EPSS0.00444