Skip to contentDjango Cms Association vulnerabilities
Newest
- django cms association django-cmsdjango CMS: Stored XSS in edit-mode plugin exception renderingCVE-2026-75526Fix available4.4 Medium
- django cms association django-cmsdjango CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)CVE-2026-63003Fix available6.5 Medium
- django cms association django-cmsdjango CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staffCVE-2026-61663Fix available4.3 Medium
- django cms association django-cmsdjango CMS: Clipboard copy IDOR discloses unauthorized plugin contentCVE-2026-54622Fix available6.5 Medium
- django cms association django-cmsdjango CMS: Structure endpoint bypasses page-view permissionCVE-2026-54624Fix available6.5 Medium
- django cms association django-cmsdjango CMS: Plugin move endpoint allows cyclic reparenting (DoS)CVE-2026-54623Fix available7.1 High
- django cms association django-cmsdjango CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)CVE-2026-54625Fix available4.8 Medium
- django cms association cms attributes fieldsStored XSS in django CMS Attributes FieldsCVE-2024-11406Fix available6.9 Medium
- django cms association filerFile Upload Bypass in django FilerCVE-2024-11404Fix available5.5 Medium
- django cms association django-cms, django-cms django cms +1 moreStored XSS in Open Source Project "django-cms"CVE-2024-11319Fix available4.8 Medium