django-cms-qe (>=1.4.3 <=3.7.2), django-crunch (=0.1.12) +8 more potentially affected by CVE-2024-11406 via djangocms-attributes-field (>=0.3.0 <=3.0.0)

djangocms-attributes-field PYPI version =0.3.0, =1.4.3, =0.6.2, =7.0.4, =1.0.0, =1.0.0, =2.0.0, =2.28.1, =0.1.0, =1.0.0b3 - taccsite-cms =3.6.0a0 Source cves: CVE-2024-11406 Source advisory: OSV:GHSA-VXCV-4XVF-PC22...

CVE-2024-11406

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0...

CVE-2024-11406 Stored XSS in django CMS Attributes Fields

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0...