Django-cms vulnerabilities

Products

• Django-cms 7
• Django Cms 3

Newest

• django cms association django-cms django CMS: Stored XSS in edit-mode plugin exception rendering CVE-2026-75526 Fix available 4.4 MediumAugust 20, 2026
• django cms association django-cms django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass) CVE-2026-63003 Fix available 6.5 MediumAugust 20, 2026
• django cms association django-cms django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff CVE-2026-61663 Fix available 4.3 MediumAugust 20, 2026
• django cms association django-cms django CMS: Clipboard copy IDOR discloses unauthorized plugin content CVE-2026-54622 Fix available 6.5 MediumAugust 20, 2026
• django cms association django-cms django CMS: Structure endpoint bypasses page-view permission CVE-2026-54624 Fix available 6.5 MediumAugust 20, 2026
• django cms association django-cms django CMS: Plugin move endpoint allows cyclic reparenting (DoS) CVE-2026-54623 Fix available 7.1 HighAugust 20, 2026
• django cms association django-cms django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) CVE-2026-54625 Fix available 4.8 MediumAugust 20, 2026
• django cms association django-cms, django-cms django cms +1 more Stored XSS in Open Source Project "django-cms" CVE-2024-11319 Fix available 4.8 MediumNovember 18, 2024
• django-cms django cms Cross-site Scripting in django-cms CVE-2021-44649 Fix available 5.4 MediumJanuary 12, 2022
• django-cms django cms django-cms CSRF Vulnerability CVE-2015-5081 Fix available 8.8 HighAugust 18, 2017