| Package | Affected versions | Patched versions |
|---|---|---|
| plone | ≥ 2.5, < 4.3.16≥ 2.5a1, < 4.3.16≥ 5, < 5.1.0≥ 5.0a1, < 5.1.0 | 4.3.165.1.0 |
| products-cmfplone | ≥ 5.0.0, < 5.0.10≥ 5.1a1, < 5.1.0< 4.3.17 | 5.0.105.1.04.3.17 |
| plone | = 5.1≤ 5.0.9 |
A member of the Plone site could set javascript in the home_page property of their profile, and have this executed when a visitor clicks the home page link on the author page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free