CVE-2017-1000482: Plone

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.

Affected products

• Plone Plone: up to and including 5.0.9; version 5.1 only

Published 2018-01-03. Last modified 2026-06-17.