tocsin

CVE-2026-54503

2 advisories.

PyPI/plone-app-textfield CVE-2026-54503: medium 4.3

plone.app.textfield: Stored XSS by spoofing mime type

Action: Upgrade plone-app-textfield to 2.0.2 or later.

pip install plone-app-textfield==2.0.2
pip install plone-app-textfield==3.0.2
pip install plone-app-textfield==4.0.1

Affected

introducedfixedlast affected
02.0.2-
3.0.03.0.2-
4.0.04.0.1-

Fixed versions

2.0.23.0.24.0.1

Sources

CVE-2026-54503 · published · modified · JSON

PyPI/plone-app-textfield CVE-2026-54503: medium 4.3

plone.app.textfield: Stored XSS by spoofing mime type

Action: Upgrade plone-app-textfield to 2.0.2 or later.

pip install plone-app-textfield==2.0.2
pip install plone-app-textfield==3.0.2
pip install plone-app-textfield==4.0.1

Affected

introducedfixedlast affected
02.0.2-
3.0.03.0.2-
4.0.04.0.1-

Fixed versions

2.0.23.0.24.0.1

Sources

CVE-2026-54503 · published · modified · JSON