Medium
CVE-2026-54625
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filters
High
CVE-2026-54623
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
Medium
CVE-2026-54622
django CMS: Clipboard copy IDOR discloses unauthorized plugin content
Medium
CVE-2026-61663
django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff
Medium
CVE-2026-54624
django CMS: Structure endpoint bypasses page-view permission
Medium
CVE-2026-63003
django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)
Medium
CVE-2026-75526
django CMS: Stored XSS in edit-mode plugin exception rendering
Medium
CVE-2024-11319
django CMS Cross-Site Scripting (XSS)
High
CVE-2015-5081
Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified v
Medium
CVE-2021-44649
Cross-site Scripting in django-cms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.