Security
فارسی
All products

django-cms

PyPI · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
django CMS: Clipboard copy IDOR discloses unauthorized plugin contentCVE-2026-54622 · GHSA-4XFR-4P46-GC6PVersion ranges need review. django-cms PyPI Medium Fix reported
django CMS: Stored XSS in edit-mode plugin exception renderingCVE-2026-75526 · GHSA-HVQ6-2R72-P2X7Version ranges need review. django-cms PyPI Medium Fix reported
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)CVE-2026-54623 · GHSA-8JJ7-4V57-FRF5Version ranges need review. django-cms PyPI High Fix reported
django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staffCVE-2026-61663 · GHSA-8QJ2-C6Q4-F399Version ranges need review. django-cms PyPI Medium Fix reported
django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)CVE-2026-63003 · GHSA-6X92-6VX4-5FWRVersion ranges need review. django-cms PyPI Medium Fix reported
django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)CVE-2026-54625 · GHSA-FWJF-M4QW-9F2XVersion ranges need review. django-cms PyPI Medium Fix reported
django CMS: Structure endpoint bypasses page-view permissionCVE-2026-54624 · GHSA-VGXM-H9GX-H9W7Version ranges need review. django-cms PyPI Medium Fix reported
django CMS Cross-Site Scripting (XSS)CVE-2024-11319 · GHSA-GV5H-5655-H4MV django-cms PyPI Medium Fix reported
django-cms CSRF VulnerabilityCVE-2015-5081 · GHSA-2PQC-GV8Q-PVQVVersion ranges need review. django-cms PyPI High Fix reported
Cross-site Scripting in django-cmsCVE-2021-44649 · GHSA-HX7C-QPFQ-XCRPVersion ranges need review. django-cms PyPI Medium Fix reported