Plone is an user friendly and extensible Content Management System running on top of Python and Zope.
Affected versions of this package are vulnerable to Weak Password Requirements. Some forms that should have checked the strength of a password, did not do this. When registering anonymously, it was checked correctly. But the password reset form or the admin form for adding a new user missed this check.
Plone to version 4.3.20, 5.2.1 or higher.