Exposure of Plone

CMS

34

exposure score

1,992

sites use

0

exploited

3

critical

CVEs

12 results

CVE-2021-32806MEDIUMURL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportalEPSS 1.0%CVE-2023-42457HIGHplone.rest vulnerable to Denial of Service when ++api++ is used many timesEPSS 1.0%CVE-2026-57576MEDIUMplone.app.dexterity and plone.app.contenttypes have a Denial of Service due to excessive title or description lengthEPSS 0.8%CVE-2025-58047HIGHVolto affected by possible DoS by invoking specific URL by anonymous userEPSS 0.7%CVE-2026-57149CRITICALplone.app.portlets Vulnerable to Remote Code Execution via TALES InjectionEPSS 0.6%CVE-2022-24740MEDIUMImproper Authentication in VoltoEPSS 0.6%CVE-2023-41048LOWplone.namedfile vulnerable to Stored Cross Site Scripting with SVG imagesEPSS 0.6%CVE-2026-55247CRITICALplone.app.event: Denial of service via iCalendar importEPSS 0.4%CVE-2026-55248CRITICALplone.app.portlets: Denial of service via RSS feed portletEPSS 0.4%CVE-2025-61668HIGH@plone/volto vulnerable to potential DoS by invoking specific URL by anonymous userEPSS 0.4%CVE-2026-54503MEDIUMplone.app.textfield: Stored XSS by spoofing mime typeEPSS 0.4%CVE-2026-28413MEDIUMProducts.isurlinportal: Possible open redirect when using more than 2 forward slashesEPSS 0.3%