Skip to content
OpenAdvisories

Package · PyPI

django-cms

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-54623

    django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

    django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the move_plugin endpoint in cms/admin/placeholderadmin.py accepts an attacker-controlled plugin_parent value without rejecting a plugin…

    django-cms django-cms django-cms PyPI
  • High 8.8
    CVE-2015-5081

    django-cms CSRF Vulnerability

    Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors.

    django-cms PyPI