Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

django-cms — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in django-cms, with AI-generated Chinese analysis, references, and POCs.

Vendor: django CMS Association

CVE ID Title CVSS Severity Published
CVE-2026-75526 django CMS: Stored XSS in edit-mode plugin exception rendering CWE-79 4.4 Medium 2026-08-20
CVE-2026-63003 django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass) CWE-639 6.5 Medium 2026-08-20
CVE-2026-61663 django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff CWE-639 4.3 Medium 2026-08-20
CVE-2026-54622 django CMS: Clipboard copy IDOR discloses unauthorized plugin content CWE-639 6.5 Medium 2026-08-20
CVE-2026-54624 django CMS: Structure endpoint bypasses page-view permission CWE-285 6.5 Medium 2026-08-20
CVE-2026-54623 django CMS: Plugin move endpoint allows cyclic reparenting (DoS) CWE-674 7.1 High 2026-08-20
CVE-2026-54625 django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) CWE-349 4.8 Medium 2026-08-20
CVE-2024-11319 Stored XSS in Open Source Project "django-cms" CWE-79 4.8 Medium 2024-11-18

All 8 known CVE vulnerabilities affecting django-cms with full Chinese analysis, references, and POCs where available.