EUVD-2026-17660

AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL Validation...

PT-2024-15734 · Plone Cms · Plone Cms

Name of the Vulnerable Software and Affected Versions: Plone CMS versions prior to 6.0.5 Description: A Cross-Frame Scripting issue has been found in Plone CMS. This issue allows an attacker to store a malicious URL that can be opened by an administrator, potentially leading to the execution of a...