Pplone

Products

Exploited and recent CVEs

• CVE-2026-57576 Medium 6.5 plone.app.dexterity and plone.app.contenttypes have a Denial of Service due to excessive title or description length 0.8%
• CVE-2026-57576 Medium 6.5 plone.app.dexterity and plone.app.contenttypes have a Denial of Service due to excessive title or description length 0.8%
• CVE-2026-57149 Critical 9.9 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection 0.6%
• CVE-2026-54503 Medium 4.3 plone.app.textfield: Stored XSS by spoofing mime type 0.4%
• CVE-2026-55247 Critical 9.1 plone.app.event: Denial of service via iCalendar import 0.4%
• CVE-2026-55248 Critical 9.1 plone.app.portlets: Denial of service via RSS feed portlet 0.4%
• CVE-2026-28413 Medium 5.3 Products.isurlinportal: Possible open redirect when using more than 2 forward slashes 0.3%
• CVE-2025-61668 High 8.7 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user 0.4%
• CVE-2025-58047 High 7.5 Volto affected by possible DoS by invoking specific URL by anonymous user 0.7%
• CVE-2023-42457 High 7.5 plone.rest vulnerable to Denial of Service when ++api++ is used many times 1.0%
• CVE-2023-41048 Low 3.7 plone.namedfile vulnerable to Stored Cross Site Scripting with SVG images 0.6%
• CVE-2022-24740 Medium 5.0 Improper Authentication in Volto 0.6%
• CVE-2021-32806 Medium 6.5 URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal 1.0%