CVE-2011-0720: Plone

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.

Affected products

• Plone Plone: version 2.5 only; version 2.5.1 only; version 2.5.2 only; version 2.5.3 only; version 2.5.4 only; version 2.5.5 only; …
• Red Hat Conga: any version
• Red Hat Luci: any version

Published 2011-02-03. Last modified 2026-06-16.