Skip to content
OpenAdvisories

Vendor

DjangoCRM

4 known vulnerabilities.

Products

django-crm 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-71239

    DjangoCRM - Server-Side Template Injection in Mass Mail Message Rendering

    DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Template constructor with no sanitization, in at least three locations: message_previews.py builds an f-string embedding message.subject/message.content …

    DjangoCRM django-crm