CVE-2022-4495

The CVE-2022-4495 entry concerns collective.dms.basecontent up to v1.6 where the renderCell function in src/collective/dms/basecontent/browser/column.py is vulnerable to cross-site scripting. The issue can be exploited remotely; a fix is available in v1.7. The patch is identified by commit 6c4d61...