CVE-2024-11319

CVE-2024-11319 is a stored XSS vulnerability in django-cms that arises from improper neutralization of input during web page generation. Affected versions are 3.11.7, 3.11.8, 4.1.2, and 4.1.3. The issue enables cross-site scripting through the page-title field (per the linked advisories), with im...

CVE-2021-44649

CVE-2021-44649 affects Django CMS 3.7.3, where the plugin_type parameter is not validated when generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability that can execute arbitrary JavaScript in the affected user’s browser. The available connecte...

CVE-2015-5081

CVE-2015-5081 affects django CMS; CSRF vulnerability allows remote attackers to influence privileged users into performing unknown actions. Affected versions include 3.0.x before 3.0.14 and 3.1.x before 3.1.1. Root cause details are not fully disclosed in the provided documents. Remediation: upgr...