Latest version: v4.1.4
| CVE/PVE | Vulnerability ID | Advisory | Affected versions | Severity | Severity Score |
|---|---|---|---|---|---|
| CVE-2021-44649 | 44516 |
Django-cms versions 3.7.4, 3.6.1, 3.5.4 and 3.4.7 include a fix for C… |
|
MEDIUM | 5.4 |
| PVE-2021-34226 | 34226 |
Django-cms 3.3.4 and 3.4.3 fix a security vulnerability in the page r… |
|
HIDDEN | X.Y |
| PVE-2022-49495 | 49495 |
Django-cms 3.3.4 and 3.4.3 fix a vulnerability where the 'next' param… |
|
HIDDEN | X.Y |
| PVE-2021-25746 | 25746 |
Django-cms 3.2.4 and 3.1.6 address security concerns in render_model*… |
|
HIDDEN | X.Y |
| CVE-2024-11319 | 74253 |
Affected versions of django-cms are vulnerable to Cross-Site Scriptin… |
|
MEDIUM | 4.8 |
| CVE-2015-5081 | 35628 |
Cross-site request forgery (CSRF) vulnerability in django CMS before … |
|
HIGH | 8.8 |
| PVE-2024-70718 | 70718 |
Django-cms 4.0 includes a security enhancement to prevent JavaScript … |
|
- | - |
| PVE-2022-44745 | 44745 |
Django-cms 3.5.3 fixes an incorrect handling of permissions. https:/… |
|
- | - |
| PVE-2021-25743 | 25743 |
Django-cms 3.0.14 fixes an issue where privileged users could be tric… |
|
HIDDEN | X.Y |
| PVE-2021-25742 | 25742 |
Django-cms before 2.1.4 fixes a XSS issue in Text Plugins. https://g… |
|
HIDDEN | X.Y |
| PVE-2021-25741 | 25741 |
Django-cms 2.1.3 fixes a serious security issue in PlaceholderAdmin t… |
|
HIDDEN | X.Y |