-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Plone | pip | <= 6.0.5 | 6.0.7 |
Miggo AIRoot Cause AnalysisCross-Frame Scripting (CWE-1021) typically occurs when security headers like X-Frame-Options or CSP frame-ancestors are missing/misconfigured. The vulnerability description indicates attackers could exploit iframe elements through stored malicious URLs, strongly suggesting insufficient frame embedding restrictions. While exact code changes aren't available, Plone's security middleware handling HTTP responses is the most probable location for this vulnerability, as header configuration is the primary defense against UI redressing attacks. The high confidence comes from the direct alignment between the CWE, vulnerability description, and standard XFS mitigation techniques.
PythonPythonOngoing coverage of React2Shell