CVE-2024-0669

CVE-2024-0669 is a Cross-Frame Scripting (XFS) vulnerability affecting Plone CMS versions below 6.0.5. An attacker can exploit this by storing a malicious URL that, when accessed by an administrator, executes a harmful iframe element. This vulnerability has a CVSS score of 7.1 (HIGH), indicating a network-based attack with low complexity, requiring user interaction, and potentially impacting confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.