Django-Cms

10 CVEs in 2 Django-Cms products, including Django-Cms, Django Cms. Newest: CVE-2026-75526 (2026-08-20). Severity, EPSS and public exploits for each.

Django-Cms products with known CVEs

ProductCVEs
Django-Cms7
Django Cms3
Django-Cms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-75526Medium4.42026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. From 5.0.8 until 5.0.9, ContentRenderer.render_plac…
CVE-2026-63003Medium6.52026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.9, page duplication lacks an object-le…
CVE-2026-61663Medium4.32026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.9, render_object_structure fails to au…
CVE-2026-54624Medium6.52026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, render_object_structure in cms/view…
CVE-2026-54622Medium6.52026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the copy_plugins endpoint in cms/ad…
CVE-2026-54625Medium4.82026-08-20django CMS is a content management system powered by Django. Prior to 5.0.8 and in 5.1.0a1, the django CMS page cache in cms/cache/page.py ignores request head…
CVE-2026-54623High7.12026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the move_plugin endpoint in cms/adm…
CVE-2024-11319Medium4.82024-11-18Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django-cms allows Cross-Sit…
CVE-2021-44649Medium5.42022-01-12Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (X…
CVE-2015-5081High8.82017-08-18Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into per…