CVE-2020-28734

creationtimestamp| type| source ---|---|--- 2026-07-07 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3hhejvq42k...

CVE-2020-28734

Plone before 5.2.3 is vulnerable to an XML External Entity (XXE) attack via a feature limited to the Manager role. The CVE entry (CVE-2020-28734) is corroborated by multiple connected sources (Red Hat, OSV, CNVD, GHSA, NVD, and OpenVAS entries) indicating an XXE issue that affects Plone versions ...