Cpe:2.3:a:plone:plone.app.event:*:*:*:*:*:*:*:*

The plone.app.event package contains multiple vulnerabilities including DoS, SSRF, and stored XSS within its iCalendar import functionality, potentially allowing a logged-in editor to compromise server availability and security.