VYPR

Plone.app.event

by Plone (software)

CVEs (1)

  • CVE-2026-55247CriAug 28, 2026
    risk 0.52cvss 9.1epss

    plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events,…