Skip to content
Threat Feed
Subscribe

Product

Plone.app.event (Vulnerable: >= 6.0.0a1, < 6.0.1)

1 brief RSS
medium advisory

Critical Vulnerabilities in plone.app.event

The plone.app.event package contains multiple vulnerabilities including DoS, SSRF, and stored XSS within its iCalendar import functionality, potentially allowing a logged-in editor to compromise server availability and security.

plone.app.event +1
1t 1c