Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: django CMS Association Clear all filters
TI-2024-10569 CVE-2024-11406 · GHSA-vxcv-4xvf-pc22

Stored XSS in django CMS Attributes Fields

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00493 Published 2024-11-20 Fixed in 4.0, 4.0.0 CWE-79
TI-2024-10567 CVE-2024-11404 · GHSA-j4v3-wwwx-5gqv

File Upload Bypass in django Filer

Priority LOW 25

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored X…

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00379 Published 2024-11-20 Fixed in 3.3, 3.3.0 CWE-434