django-cms vulnerabilities (PyPI)
10 vulnerabilities.
-
django-cmsPyPI django CMS: Stored XSS in edit-mode plugin exception rendering 4.4 Medium -
django-cmsPyPI django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass) 6.5 Medium -
django-cmsPyPI django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff 4.3 Medium -
django-cmsPyPI django CMS: Clipboard copy IDOR discloses unauthorized plugin content 6.5 Medium -
django-cmsPyPI django CMS: Structure endpoint bypasses page-view permission 6.5 Medium -
django-cmsPyPI django CMS: Plugin move endpoint allows cyclic reparenting (DoS) 7.1 High -
django-cmsPyPI django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) 4.8 Medium -
django-cmsPyPI Stored XSS in Open Source Project "django-cms" 4.8 Medium -
django-cmsPyPI Cross-site Scripting in django-cms 5.4 Medium -
django-cmsPyPI django-cms CSRF Vulnerability 8.8 High