CVE-2011-0720
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- plone:plone
- redhat:conga
- redhat:luci
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-3v28-9jjp-4g5w | PyPI | plone | >=2.5 <4.0.4 | 4.0.4 |
| PYSEC-2011-13 | PyPI | plone | <4.0.1 | 4.0.1 |