CVE-2021-33507

Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS...

CVE-2021-33507

CVE-2021-33507 affects Zope CMFCore prior to 2.5.1 and Products.PluggableAuthService prior to 2.6.2, as used in Plone up to 5.2.4 and other products, enabling Reflected XSS. Connected sources confirm the affected components and versions; no exploitation details are provided in the documents. The ...