Description
Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.
Remediation
References
Related Vulnerabilities
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4288)
GlassFish CVE-2017-3626 Vulnerability (CVE-2017-3626)
MySQL CVE-2021-2056 Vulnerability (CVE-2021-2056)
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)
MySQL Improper Access Control Vulnerability (CVE-2025-50081)