VYPR

Namedfile

by Plone (software)

Source repositories

CVEs (1)

  • CVE-2023-41048LowSep 21, 2023
    risk 0.17cvss 3.7epss 0.00

    plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross site scripting vulnerability for SVG images. A security hotfix from 2021 already…