CVE-2015-7316

6.1 mediumEPSS 1.4%

Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

plone:plone

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-vf8g-m3vq-6p4p	PyPI	plone	>=3.3 <3.3.7	3.3.7
GHSA-vf8g-m3vq-6p4p	PyPI	plone	>=4.0 <4.0.11	4.0.11
GHSA-vf8g-m3vq-6p4p	PyPI	plone	>=4.1 <4.1.7	4.1.7
GHSA-vf8g-m3vq-6p4p	PyPI	plone	>=4.2 <4.2.8	4.2.8
GHSA-vf8g-m3vq-6p4p	PyPI	plone	>=4.3 <4.3.7	4.3.7
GHSA-vf8g-m3vq-6p4p	PyPI	plone	5.0rc1	no fix published
PYSEC-2017-53	PyPI	plone	>=3.3 <4.0a1 >=4.0 <4.1a1 >=4.1 <4.2a1 >=4.2 <4.3a1 >=4.3 <4.3.7 >=5.0a1 <5.0rc2	4.0a1, 4.1a1, 4.2a1, 4.3a1, 4.3.7, 5.0rc2

References

Check your stack JSON