wagtail vulnerabilities (PyPI)
30 vulnerabilities.
-
wagtailPyPI Wagtail: Improper restriction handling on Page translation API endpoint 6.5 Medium -
wagtailPyPI Wagtail: Improper permission handling when copying snippets 6.5 Medium -
wagtailPyPI Wagtail: Improper restriction handling on descendant collections in Documents and Images API 5.3 Medium -
wagtailPyPI Wagtail: Identification of documents by SHA1 hash 3.7 Low -
wagtailPyPI Wagtail: Improper restriction handling on Pages admin API 4.3 Medium -
wagtailPyPI Wagtail: Reflected XSS in dynamic image URL generator view 7.3 High -
wagtailPyPI Wagtail: Pages translations can be created without page permissions when using simple_translation 4.3 Medium -
wagtailPyPI Wagtail: Improper permission handling in image preview 6.5 Medium -
wagtailPyPI Wagtail: Improper restriction handling on Documents and Images chosen endpoints 4.3 Medium -
wagtailPyPI Wagtail: Denial of service via unbounded filter specs in the image preview 4.3 Medium -
wagtailPyPI Wagtail: Improper permission handling when copying pages 6.5 Medium -
wagtailPyPI Wagtail: Improper restriction handling on Documents and Images API 5.3 Medium -
wagtailPyPI Wagtail: Improper permission handling when deleting form submissions 6.5 Medium -
wagtailPyPI Wagtail: Improper permission handling when viewing page history 4.3 Medium -
wagtailPyPI Wagtail: Improper permission handling when comparing revisions 6.5 Medium -
wagtailPyPI Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface 6.1 Medium -
wagtailPyPI Wagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributes 6.1 Medium -
wagtailPyPI Wagtail has improper permission handling on admin preview endpoints 5.1 Medium -
wagtailPyPI Wagtail regular expression denial-of-service via search query parsing 6.5 Medium -
wagtailPyPI Improper Handling of Insufficient Permissions in Wagtail 5.5 Medium -
wagtailPyPI Permission check bypass when editing a model with per-field restrictions in wagtail 2.7 Low -
wagtailPyPI Disclosure of user names via admin bulk action views in wagtail 2.7 Low -
wagtailPyPI Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files 4.9 Medium -
wagtailPyPI Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views 6.4 Medium -
wagtailPyPI Comment reply notifications sent to incorrect users in wagtail 3.5 Low -
wagtailPyPI Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks 5.4 Medium -
wagtailPyPI Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields 6.1 Medium -
wagtailPyPI Cross-Site Scripting in Wagtail 5.7 Medium -
wagtailPyPI Potential Observable Timing Discrepancy in Wagtail 6.1 Medium -
wagtailPyPI Possible XSS attack in Wagtail 5.8 Medium