GHSA-HX7C-QPFQ-XCRP Cross-site Scripting in django-cms

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2021-44649 via django-cms (3.6.0)

django-cms PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2021-44649 Source advisory: OSV:GHSA-HX7C-QPFQ-XCRP...

richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2021-44649 via django-cms (3.6.0)

django-cms PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2021-44649 Source advisory: GHSA-HX7C-QPFQ-XCRP...

django-cms-forms (>=0.0.1, <=0.0.11) potentially affected by CVE-2021-44649 via django-cms (3.7.1)

django-cms PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-forms =0.0.1, =0.0.11 Source cves: CVE-2021-44649 Source advisory: GHSA-HX7C-QPFQ-XCRP...

cmsplugin-markdownx (0.1.2) potentially affected by CVE-2021-44649 via django-cms (3.4.2)

django-cms PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - cmsplugin-markdownx 0.1.2 Source cves: CVE-2021-44649 Source advisory: OSV:GHSA-HX7C-QPFQ-XCRP...

cmsplugin-markdownx (0.1.2) potentially affected by CVE-2021-44649 via django-cms (3.4.2)

django-cms PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - cmsplugin-markdownx 0.1.2 Source cves: CVE-2021-44649 Source advisory: GHSA-HX7C-QPFQ-XCRP...

aldryn-django-cms (3.5.3.2), django-cms-qe (1.4.3) +3 more potentially affected by CVE-2021-44649 via django-cms (>=3.5.2, <=3.5.3)

django-cms PYPI version =3.5.2, =0.2.4, =0.2.5 - django-shopit 0.5.2 - richie 0.1.0 Source cves: CVE-2021-44649 Source advisory: OSV:GHSA-HX7C-QPFQ-XCRP...

aldryn-django-cms (3.5.3.2), django-cms-qe (1.4.3) +3 more potentially affected by CVE-2021-44649 via django-cms (>=3.5.2, <=3.5.3)

django-cms PYPI version =3.5.2, =0.2.4, =0.2.5 - django-shopit 0.5.2 - richie 0.1.0 Source cves: CVE-2021-44649 Source advisory: GHSA-HX7C-QPFQ-XCRP...

CVE-2021-44649

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

CVE-2021-44649

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

CVE-2021-44649

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

Cross site scripting

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

PYSEC-2022-7

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2021-44649 via django-cms (3.6.0)

django-cms PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...

PYSEC-2022-7

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

cmsplugin-markdownx (0.1.2) potentially affected by CVE-2021-44649 via django-cms (3.4.2)

django-cms PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - cmsplugin-markdownx 0.1.2 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...

django-cms-forms (>=0.0.1, <=0.0.11) potentially affected by CVE-2021-44649 via django-cms (3.7.1)

django-cms PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-forms =0.0.1, =0.0.11 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...

aldryn-django-cms (3.5.3.2), django-cms-qe (1.4.3) +3 more potentially affected by CVE-2021-44649 via django-cms (>=3.5.2, <=3.5.3)

django-cms PYPI version =3.5.2, =0.2.4, =0.2.5 - django-shopit 0.5.2 - richie 0.1.0 Source cves: CVE-2021-44649 Source advisory: OSV:PYSEC-2022-7...

CVE-2021-44649

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

django-cms-forms (>=0.0.1, <=0.0.11) potentially affected by CVE-2021-44649 via django-cms (3.7.1)

django-cms PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-forms =0.0.1, =0.0.11 Source cves: CVE-2021-44649 Source advisory: MEND:CVE-2021-44649...