high7.1
CVE-2024-0669
Cross-Frame Scripting vulnerability has been found on Plone CMS
Impact
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | Plone | <= 6.0.5 | 6.0.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plone | Plone | before 6.0.7 |