products-cmfplone vulnerabilities
CVEs whose affected-version data names the products-cmfplone package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2015-7315Medium· 5.9Plone unauthorized member addition vulnerability
Plone unauthorized member addition vulnerability
▾ Sunlitproducts-cmfplone · products-cmfploneEPSS 2.1%via OSV
CVE-2017-1000481Medium· 6.1Products.CMFPlone Open Redirect Vulnerability
Products.CMFPlone Open Redirect Vulnerability
▾ Sunlitproducts-cmfplone · products-cmfploneEPSS 0.89%via OSV
CVE-2017-1000482Medium· 5.4Products.CMFPlone XSS in profile home_page property
Products.CMFPlone XSS in profile home_page property
▾ Sunlitproducts-cmfplone · products-cmfploneEPSS 0.69%via OSV
CVE-2011-1948Medium· 6.1Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
▾ Sunlitproducts-passwordresettool · products-passwordresettoolEPSS 2.4%via OSV