tocsin

CVE-2015-7316

2 advisories.

PyPI/plone CVE-2015-7316: medium 6.1, EPSS 1.42%

Plone Cross-site Scripting Vulnerability

Action: Upgrade plone to 3.3.7 or later.

pip install plone==3.3.7
pip install plone==4.0.11
pip install plone==4.1.7
pip install plone==4.2.8
pip install plone==4.3.7

Affected

introducedfixedlast affected
3.33.3.7-
4.04.0.11-
4.14.1.7-
4.24.2.8-
4.34.3.7-

Fixed versions

3.3.74.0.114.1.74.2.84.3.7

Sources

CVE-2015-7316 · published · modified · JSON

PyPI/plone CVE-2015-7316: unknown, EPSS 1.42%

Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1.

Action: Upgrade plone to 4.0a1 or later.

pip install plone==4.0a1
pip install plone==4.1a1
pip install plone==4.2a1
pip install plone==4.3a1
pip install plone==4.3.7
pip install plone==5.0rc2

Affected

introducedfixedlast affected
3.34.0a1-
4.04.1a1-
4.14.2a1-
4.24.3a1-
4.34.3.7-
5.0a15.0rc2-

Fixed versions

4.0a14.1a14.2a14.3a14.3.75.0rc2

Sources

CVE-2015-7316 · published · modified · JSON