Lucene search
PRIOn knowledge basePRION:CVE-2021-44649HistoryJan 12, 2022 - 1:15 p.m.
Cross site scripting
2022-01-1213:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
24.8%
Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| django_cms | ge | 3.7.0 | |
| django_cms | lt | 3.7.4 | |
| django_cms | ge | 3.6.0 | |
| django_cms | lt | 3.6.1 | |
| django_cms | ge | 3.5.0 | |
| django_cms | lt | 3.5.4 | |
| django_cms | ge | 3.4.0 | |
| django_cms | lt | 3.4.7 |
Related
osv
osv
PYSEC-2022-7
2022-01-12 13:15:00
Cross-site Scripting in django-cms
2022-01-13 20:10:53
nvd
nvd
CVE-2021-44649
2022-01-12 13:15:07
cve
cve
CVE-2021-44649
2022-01-12 13:15:07
cnvd
cnvd
Django Cross-Site Scripting Vulnerability (CNVD-2022-08043)
2022-01-16 00:00:00
cvelist
cvelist
CVE-2021-44649
2022-01-12 12:57:19
github
github
Cross-site Scripting in django-cms
2022-01-13 20:10:53