Skip to content
OpenAdvisories

Vendor

django CMS Association

3 known vulnerabilities.

Products

django Filer 1 django CMS Attributes Fields 1 django-cms 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-11406

    Stored XSS in django CMS Attributes Fields

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0.

    django CMS Association django CMS Attributes Fields djangocms-attributes-field PyPI
  • Medium 5.5
    CVE-2024-11404

    File Upload Bypass in django Filer

    Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: fr…

    django CMS Association django Filer django-filer PyPI
  • Medium 4.8
    CVE-2024-11319

    Stored XSS in Open Source Project "django-cms"

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django-cms allows Cross-Site Scripting (XSS). This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3.

    django CMS Association django-cms django-cms PyPI