Search results
34 results
Sort by:
Information disclosures: mostly installation logs
Blind SSRF via feedparser accessing an internal URL
Server Side Request Forgery via event ical URL
Server Side Request Forgery via lxml parser
Remote Code Execution via traversal in expressions with aliases
Remote Code Execution via traversal in expressions part 2
Stored XSS in folder contents
Remote Code Execution via Python Scripts
Reflected XSS and Open Redirect in image_view_fullscreen
Hotfixes
Plone Hotfix list
Historical list of hotfixes for each Plone version
Plone Hotfix list
Release schedule link
The Plone Release pages try to point to /download/release-schedule, but it comes out as /release-schedule, so I created a link.
20230921
20230921
Denial of Service in plone.rest
Denial of Service when ++api++ is used many times.