Search results
40 results
Sort by:
An open redirection when calling a specific url.
By accessing a specific URL, you could get redirected to the site of an attacker
XSS using the home_page member property.
Cross Site Scripting using the home_page member property.
Sandbox escape
Release schedule link
The Plone Release pages try to point to /download/release-schedule, but it comes out as /release-schedule, so I created a link.
20230921
20230921
Denial of Service in plone.rest
Denial of Service when ++api++ is used many times.
Plone security advisory 20260302
Possible open redirect when using more than 2 forward slashes
Plone security advisory 20260623
Various vulnerabilities, including Remote Code Execution and Denial of Service
Plone security advisory 20260605
Stored XSS by spoofing mime type