Known Vulnerabilities for products from Django-cms
Listed below are 3 of the newest known vulnerabilities associated with the vendor "Django-cms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125106 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-125105 json | Not Provided | 2026-11-09 | 2026-11-10 | |
| CVE-2026-124318 json | Not Provided | 2026-11-07 | 2026-11-10 | |
| CVE-2026-123820 json | Not Provided | 2026-11-09 | 2026-11-10 | |
| CVE-2026-123819 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-123084 json | Not Provided | 2026-11-10 | 2026-11-12 | |
| CVE-2026-122224 json | Not Provided | 2026-11-04 | 2026-11-09 | |
| CVE-2026-114582 json | Not Provided | 2026-11-03 | 2026-11-03 | |
| CVE-2026-114138 json | Not Provided | 2026-10-21 | 2026-10-28 | |
| CVE-2026-114137 json | Not Provided | 2026-10-21 | 2026-10-23 | |
| CVE-2024-11319 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Assoc... | Not Provided | 2024-11-18 | 2026-06-02 |
| CVE-2021-44649 json | Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resu... | 5.4 - MEDIUM | 2022-01-12 | 2022-01-20 |
| CVE-2015-5081 json | Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to ma... | 8.8 - HIGH | 2017-08-18 | 2017-08-24 |