PYSEC-2021-85

Plone through 5.2.4 allows XSS via the inlinediff methods in Products.CMFDiffTool...

CVE-2021-33513

Plone through 5.2.4 allows XSS via the inlinediff methods in Products.CMFDiffTool...

PT-2021-20171

Name of the Vulnerable Software and Affected Versions Plone versions through 5.2.4 Description The issue allows for cross-site scripting XSS attacks via the inline diff methods in Products.CMFDiffTool. This can potentially lead to malicious script execution on the client-side. Recommendations For...

Plone cross-site scripting vulnerabilities

Plone is the industry's leading open source CMS system for content management, document management and knowledge management. A cross-site scripting vulnerability exists in Plone 5.2.4 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the inlinedi...