CVE-2020-7937

Advisory

Plone.app.content 3.8.1 integrate the Plone20200121 hotfix to prevent XSS in title - see: https://plone.org/security/hotfix/20200121/xss-in-the-title-field-on-plone-5-0-and-higher

Affected package

Affected versions

Fixed versions

Vulnerability changelog

------------------

Bug fixes:


- Integrate Plone20200121 hotfix: prevent XSS in title.
Part of https://plone.org/security/hotfix/20200121/xss-in-the-title-field-on-plone-5-0-and-higher
[maurits] (3021)

Resources

• https://pypi.org/project/plone.app.content
• https://pyup.io/changelogs/plone.app.content/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7937
• https://plone.org/security/hotfix/20200121
• https://plone.org/security/hotfix/20200121/xss-in-the-title-field-on-plone-5-0-and-higher
• https://www.openwall.com/lists/oss-security/2020/01/22/1
• http://www.openwall.com/lists/oss-security/2020/01/24/1