{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.2.4"}],"component":"plone","cve_ids":["CVE-2021-33508"],"ecosystem":"PyPI","epss":0.00631,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rmpv-rcp6-v8wc","id":"tcs_01M5KFYAYMQGNZVP6V164VR98R","modified_at":"2024-10-18T22:01:14.557401Z","published_at":"2021-06-08T23:20:11Z","references":["https://osv.dev/vulnerability/GHSA-rmpv-rcp6-v8wc","https://nvd.nist.gov/vuln/detail/CVE-2021-33508","https://github.com/advisories/GHSA-rmpv-rcp6-v8wc","https://github.com/plone/Plone","https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-80.yaml","https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname","http://www.openwall.com/lists/oss-security/2021/05/22/1"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-rmpv-rcp6-v8wc","url":"https://osv.dev/vulnerability/GHSA-rmpv-rcp6-v8wc"}],"summary":"Cross-site scripting in Plone"}