{"action":"Upgrade products-cmfplone to 5.0.0 or later.","affected":[{"fixed":"5.0.0","introduced":"0"}],"component":"products-cmfplone","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["5.0.0"],"ghsa_id":"GHSA-8w54-22w9-3g8f","id":"tcs_01M5KF972JS641TQ2RKEMMZH1Z","modified_at":"2024-12-05T05:44:00.752961Z","published_at":"2022-01-28T23:10:40Z","references":["https://osv.dev/vulnerability/GHSA-8w54-22w9-3g8f","https://github.com/plone/Products.CMFPlone/security/advisories/GHSA-8w54-22w9-3g8f","https://github.com/plone/Products.CMFPlone"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-8w54-22w9-3g8f","url":"https://osv.dev/vulnerability/GHSA-8w54-22w9-3g8f"}],"summary":"Cross-site Scripting and Open Redirect in Products.CMFPlone"}