Skip to content
OpenAdvisories

Vendor

django-cms

7 known vulnerabilities.

Products

django-cms 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-54623

    django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

    django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the move_plugin endpoint in cms/admin/placeholderadmin.py accepts an attacker-controlled plugin_parent value without rejecting a plugin…

    django-cms django-cms django-cms PyPI