Plone 未受保護的 MembershipTool 方法任意頭像操控

* Changelogs are generally available for changes made after Nov 1, 2022