Description Any Editor could delete any snapshot, even if they have no access to read or write them. Remediation References CVE-2026-28380 Related Vulnerabilities Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33512) Joomla Other Vulnerability (CVE-2023-23752) Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2016-0736) WordPress Plugin Elementor Website Builder Multiple Vulnerabilities (3.16.4) WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.27) Severity Medium Classification CVE-2026-28380 CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities