Lucene search
+L

73 matches found

Vulnrichment
Vulnrichment
added 2024/11/20 12:0 p.m.10 views

CVE-2024-11406 Stored XSS in django CMS Attributes Fields

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0...

6.9CVSS5.8AI score0.00462EPSS
SaveExploits0References6
OSV
OSV
added 2024/11/20 12:0 p.m.18 views

CVE-2024-11406 Stored XSS in django CMS Attributes Fields

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0...

6.9CVSS5.9AI score0.00462EPSS
SaveExploits0References8
CVE
CVE
added 2024/11/20 11:55 a.m.58 views

CVE-2024-11404

CVE-2024-11404 : Affected software is Django Filer (used with Django CMS). The vulnerability is an Unrestricted Upload of File with Dangerous Type and Stored XSS caused by input data manipulation and improper neutralization of script-related HTML tags. Impact is stored XSS with potential data han...

5.5CVSS5.8AI score0.00343EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.12 views

PT-2024-16963

Name of the Vulnerable Software and Affected Versions django CMS versions prior to 4.0 Description The issue is related to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability. This allows for stored XSS attacks. The estimated number of...

6.9CVSS5.8AI score0.00462EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.5 views

django CMS 跨站脚本漏洞

django CMS is django CMS open source an open source enterprise content management system based on the django framework. A cross-site scripting vulnerability exists in django CMS versions prior to 4.0, which stems from improper input neutralization during page generation...

6.9CVSS5.9AI score0.00462EPSS
SaveExploits0References5
Veracode
Veracode
added 2024/11/19 9:39 a.m.11 views

Cross-site Scripting (XSS)

django-cms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be injected and executed...

4.8CVSS6.2AI score0.00497EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2024/11/18 12:30 p.m.28 views

django CMS Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS.This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS6.4AI score0.00497EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2024/11/18 12:30 p.m.18 views

GHSA-GV5H-5655-H4MV django CMS Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS.This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

5.5CVSS4.5AI score0.00497EPSS
SaveExploits1References8
NVD
NVD
added 2024/11/18 12:15 p.m.20 views

CVE-2024-11319

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS. This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS0.00497EPSS
SaveExploits1References5
PyPA
PyPA
added 2024/11/18 12:15 p.m.11 views

PYSEC-2024-124

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS.This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS5.9AI score0.00497EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/11/18 12:15 p.m.8 views

PYSEC-2024-124

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS.This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS5.9AI score0.00497EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/18 11:53 a.m.15 views

CVE-2024-11319 Stored XSS in Open Source Project "django-cms"

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS. This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS7.2AI score0.00497EPSS
SaveExploits1References7
CVE
CVE
added 2024/11/18 11:53 a.m.85 views

CVE-2024-11319

CVE-2024-11319 is a stored XSS vulnerability in django-cms that arises from improper neutralization of input during web page generation. Affected versions are 3.11.7, 3.11.8, 4.1.2, and 4.1.3. The issue enables cross-site scripting through the page-title field (per the linked advisories), with im...

4.8CVSS5.8AI score0.00497EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/18 11:53 a.m.16 views

CVE-2024-11319 Stored XSS in Open Source Project "django-cms"

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS. This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS5.8AI score0.00497EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/11/18 11:53 a.m.36 views

CVE-2024-11319 Stored XSS in Open Source Project "django-cms"

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS. This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS0.00497EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.7 views

django CMS 安全漏洞

django CMS is django CMS open source an open source enterprise content management system based on the django framework. A security vulnerability exists in django CMS versions 3.11.7, 3.11.8, 4.1.2, and 4.1.3, which stems from improper input neutralization during web page generation and is...

4.8CVSS5.9AI score0.00497EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/18 12:0 a.m.10 views

PT-2024-40898 · Unknown · Django Cms

Name of the Vulnerable Software and Affected Versions: django-cms versions 3.11.7 through 3.11.8 django-cms versions 4.1.2 through 4.1.3 Description: The issue affects django-cms, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations...

4.8CVSS6.1AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/13 12:0 a.m.5 views

PT-2024-9176

Name of the Vulnerable Software and Affected Versions: django-cms versions 3.11.7 through 3.11.8 django-cms versions 4.1.2 through 4.1.3 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This can be exploited by a...

9.3CVSS5.8AI score0.00497EPSS
SaveExploits1References18
SUSE CVE
SUSE CVE
added 2023/02/15 5:16 a.m.5 views

SUSE CVE-2015-5081

Cross-site request forgery CSRF vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors...

8.8CVSS7AI score0.01036EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/17 1:57 a.m.30 views

django-cms CSRF Vulnerability

Cross-site request forgery CSRF vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions...

8.8CVSS6.9AI score0.01036EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder