Known vulnerabilities in isURLInPortal

Vendor: Plone
Software: isURLInPortal
Software CPE: cpe:2.3:a:plone:isurlinportal:*:*:*:*:*:*:*:*
Website: https://plone.org/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting isURLInPortal isURLInPortal is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128357 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-28413		 CWE-601 Medium
No
No
 2.1.0, 3.1.0, 4.0.0 28.04.2026 SB20260428186
#VU55575 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-32806		 CWE-601 Medium
No
No
 1.2.0 04.08.2021 SB2021080405