Description
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
Remediation
References
Related Vulnerabilities
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Request Forgery (3.0.8)
WordPress Plugin smart Archive Page Remove Unspecified Vulnerability (3)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-14642)
Joomla Improper Input Validation Vulnerability (CVE-2021-26036)
WordPress Plugin Autoptimize Multiple Vulnerabilities (2.7.6)