472 matches found
GHSA-HX7C-QPFQ-XCRP Cross-site Scripting in django-cms
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
django-cms-forms (>=0.0.1, <=0.0.11) potentially affected by CVE-2021-44649 via django-cms (3.7.1)
django-cms PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-forms =0.0.1, =0.0.11 Source cves: CVE-2021-44649 Source advisory: OSV:GHSA-HX7C-QPFQ-XCRP...
richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2021-44649 via django-cms (3.6.0)
django-cms PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2021-44649 Source advisory: OSV:GHSA-HX7C-QPFQ-XCRP...
richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2021-44649 via django-cms (3.6.0)
django-cms PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2021-44649 Source advisory: GHSA-HX7C-QPFQ-XCRP...
django-cms-forms (>=0.0.1, <=0.0.11) potentially affected by CVE-2021-44649 via django-cms (3.7.1)
django-cms PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-forms =0.0.1, =0.0.11 Source cves: CVE-2021-44649 Source advisory: GHSA-HX7C-QPFQ-XCRP...
cmsplugin-markdownx (0.1.2) potentially affected by CVE-2021-44649 via django-cms (3.4.2)
django-cms PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - cmsplugin-markdownx 0.1.2 Source cves: CVE-2021-44649 Source advisory: OSV:GHSA-HX7C-QPFQ-XCRP...
aldryn-django-cms (3.5.3.2), django-cms-qe (1.4.3) +3 more potentially affected by CVE-2021-44649 via django-cms (>=3.5.2, <=3.5.3)
django-cms PYPI version =3.5.2, =0.2.4, =0.2.5 - django-shopit 0.5.2 - richie 0.1.0 Source cves: CVE-2021-44649 Source advisory: OSV:GHSA-HX7C-QPFQ-XCRP...
cmsplugin-markdownx (0.1.2) potentially affected by CVE-2021-44649 via django-cms (3.4.2)
django-cms PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - cmsplugin-markdownx 0.1.2 Source cves: CVE-2021-44649 Source advisory: GHSA-HX7C-QPFQ-XCRP...
CVE-2021-44649
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
CVE-2021-44649
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
CVE-2021-44649
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2021-44649 via django-cms (3.6.0)
django-cms PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...
Cross site scripting
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
PYSEC-2022-7
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
PYSEC-2022-7
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
cmsplugin-markdownx (0.1.2) potentially affected by CVE-2021-44649 via django-cms (3.4.2)
django-cms PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - cmsplugin-markdownx 0.1.2 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...
django-cms-forms (>=0.0.1, <=0.0.11) potentially affected by CVE-2021-44649 via django-cms (3.7.1)
django-cms PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-forms =0.0.1, =0.0.11 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...
aldryn-django-cms (3.5.3.2), django-cms-qe (1.4.3) +3 more potentially affected by CVE-2021-44649 via django-cms (>=3.5.2, <=3.5.3)
django-cms PYPI version =3.5.2, =0.2.4, =0.2.5 - django-shopit 0.5.2 - richie 0.1.0 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...
CVE-2021-44649
Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...
django-cms-forms (>=0.0.1, <=0.0.11) potentially affected by CVE-2021-44649 via django-cms (3.7.1)
django-cms PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-forms =0.0.1, =0.0.11 Source cves: CVE-2021-44649 Source advisory: MEND:CVE-2021-44649...