Lucene search
+L
PloneNamedfile

1 matches found

CVE
CVE
added 2023/09/21 2:31 p.m.77 views

CVE-2023-41048

CVE-2023-41048 affects plone.namedfile’s handling of SVG images in Plone Dexterity content. The vulnerability is a stored cross-site scripting issue for SVG images that persists across multiple versions (prior to 5.6.1 for Plone 5.2, 6.0.3 for 6.0.x, 6.1.3 for 6.0.5–6.0.6, and 6.2.1 for 6.0.7). T...

5.4CVSS4.5AI score0.00475EPSS
Save