Skip to content
OpenAdvisories

Vendor

batiste

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    django-page-cms through 2.0.13 CSRF via admin mutation views

    django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped con…