MEDIUM4.9PyPI
GHSA-4vr8-r7qr-fpvq· CVE-2013-7061, PYSEC-2014-66Plone Privilege escalation through exposed underlying API
Modified: 10/15/2024
package
PyPI/products-cmfplone
pkg:pypi/products-cmfplone
MEDIUM5.4PyPI
GHSA-859j-668v-mrr6· CVE-2017-1000482, PYSEC-2018-71Products.CMFPlone XSS in profile home_page property
Modified: 7/13/2026
MEDIUM6.1PyPI
GHSA-8g72-gq68-6gqh· CVE-2017-1000481, PYSEC-2018-70Products.CMFPlone Open Redirect Vulnerability
Modified: 7/13/2026
MEDIUM4.3PyPI
GHSA-8w54-22w9-3g8fCross-site Scripting and Open Redirect in Products.CMFPlone
Modified: 12/5/2024
MEDIUM5.9PyPI
GHSA-984m-rj28-8c6x· CVE-2015-7315, PYSEC-2017-52Plone unauthorized member addition vulnerability
Modified: 7/13/2026
MEDIUM6.1PyPI
GHSA-p7h9-vf92-5fj5· CVE-2011-1948, PYSEC-2011-14Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-rg52-j87w-pf83· CVE-2013-7060, PYSEC-2014-65Plone Filesystem path information leak
Modified: 10/15/2024
—PyPI
PYSEC-2014-67· CVE-2013-7060, GHSA-rg52-j87w-pf83Modified: 6/10/2026
—PyPI
PYSEC-2014-68· CVE-2013-7061, GHSA-4vr8-r7qr-fpvqModified: 6/10/2026
MEDIUM5.4PyPI
PYSEC-2026-2962· CVE-2017-1000482, GHSA-859j-668v-mrr6Products.CMFPlone XSS in profile home_page property
Modified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-2963· CVE-2017-1000481, GHSA-8g72-gq68-6gqhProducts.CMFPlone Open Redirect Vulnerability
Modified: 7/13/2026
MEDIUM5.9PyPI
PYSEC-2026-2964· CVE-2015-7315, GHSA-984m-rj28-8c6xPlone unauthorized member addition vulnerability
Modified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-2965· CVE-2011-1948, GHSA-p7h9-vf92-5fj5Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
Modified: 7/13/2026