CVE-2020-7941: Plone

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.

Affected products

• Plone Plone: from 4.3.0, up to and including 5.2.1

Published 2020-01-23. Last modified 2026-06-17.