Lucene search
+L
PloneNamedfile

1 matches found

CVE
CVE
•added 2023/09/21 2:31 p.m.•89 views

CVE-2023-41048

CVE-2023-41048 affects plone.namedfile’s handling of SVG images in Plone Dexterity content. The vulnerability is a stored cross-site scripting issue for SVG images that persists across multiple versions (prior to 5.6.1 for Plone 5.2, 6.0.3 for 6.0.x, 6.1.3 for 6.0.5–6.0.6, and 6.2.1 for 6.0.7). T...

5.4CVSS4.5AI score0.00566EPSS
Save