An open redirection and reflected Cross Site Scripting attack (XSS) on the login form and possibly other places where redirects are done.
By accessing a specific URL, you could get redirected to the site of an attacker
Cross Site Scripting using the home_page member property.
Timeline of maintenance and support for Plone releases. Last major policy update: 2024-01-15.
A bugfix release with many fixes and package version upgrades
Final releases to 4.3 and 5.1 series, along with the latest 5.2.3.
Check out the latest release to Plone 5.2 series, which includes new features to plone.restapi along with security fixes and other improvements.
Check out the latest release to Plone 5.2 series, which includes security fixes, Zope updates and other improvements