GHSA-F7QW-5FGJ-247X Cross-site Scripting and Open Redirect in plone.app.contenttypes

Impact Plone is vulnerable to reflected cross site scripting and open redirect when an attacker can get a compromised version of the imageviewfullscreen page in a cache, for example in Varnish. The technique is known as cache poisoning. Any later visitor can get redirected when clicking on a link...

PYSEC-2022-21

Products.ATContentTypes are the core content types for Plone 2.1 - 4.3. Versions of Plone that are dependent on Products.ATContentTypes prior to version 3.0.6 are vulnerable to reflected cross site scripting and open redirect when an attacker can get a compromised version of the imageviewfullscre...

PT-2022-16115

Name of the Vulnerable Software and Affected Versions Plone versions 2.1 through 4.3 Products.ATContentTypes versions prior to 3.0.6 Description The issue concerns reflected cross site scripting and open redirect vulnerabilities. An attacker can exploit these by getting a compromised version of t...