Plone Isurlinportal
2 CVEs affecting Plone Isurlinportal. Latest disclosed: 2026-03-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32806 | Medium | 6.5 | 2021-08-02 | Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1.2.0 have an Open Redirect vulnerabilit… |
CVE-2026-28413 | Medium | 5.3 | 2026-03-05 | Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example m… |