The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Denial Of Service
Buffer Overflow
Perl
Data Dumper
NVD
CVSS 2.0
2.1
EPSS
0.1%
Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.
XSS
Plone
NVD
GitHub
CVSS 2.0
3.5
EPSS
0.2%