CVE-2021-29002: Plone

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.site_title" parameter.

Affected products

• Plone Plone: version 5.2.3 only

Published 2021-03-24. Last modified 2026-06-17.