Known Vulnerabilities for products from Django-cms
Listed below are 3 of the newest known vulnerabilities associated with the vendor "Django-cms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114138 json | Not Provided | 2026-10-21 | 2026-10-21 | |
| CVE-2026-114137 json | Not Provided | 2026-10-21 | 2026-10-21 | |
| CVE-2026-114136 json | Not Provided | 2026-10-21 | 2026-10-21 | |
| CVE-2026-113731 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-110593 json | Not Provided | 2026-10-14 | 2026-10-16 | |
| CVE-2026-105641 json | Not Provided | 2026-10-05 | 2026-10-07 | |
| CVE-2026-105638 json | Not Provided | 2026-10-05 | 2026-10-05 | |
| CVE-2026-105392 json | Not Provided | 2026-10-05 | 2026-10-06 | |
| CVE-2026-105315 json | Not Provided | 2026-10-05 | 2026-10-05 | |
| CVE-2026-104073 json | Not Provided | 2026-10-06 | 2026-10-07 | |
| CVE-2024-11319 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Assoc... | Not Provided | 2024-11-18 | 2026-06-02 |
| CVE-2021-44649 json | Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resu... | 5.4 - MEDIUM | 2022-01-12 | 2022-01-20 |
| CVE-2015-5081 json | Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to ma... | 8.8 - HIGH | 2017-08-18 | 2017-08-24 |