CVE-2020-7936

—

CVSS 3.1

6.1 medium

EPSS

<1%p58

Published

Jan 23, 2020 (Jan 23, 2020)

Modified

Jun 17, 2026

Description

An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.

Vendors: plone
Products: plone
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.