CVE-2020-7936: Plone

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.

Affected products

• Plone Plone: from 4.0.0, up to and including 5.2.1

Published 2020-01-23. Last modified 2026-06-17.