django-cms vulnerabilities

django CMS: Stored XSS in edit-mode plugin exception rendering

django-cms · django-cms

django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

django-cms · django-cms

django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff

django-cms · django-cms

django CMS: Clipboard copy IDOR discloses unauthorized plugin content

django-cms · django-cms

django CMS: Structure endpoint bypasses page-view permission

django-cms · django-cms

django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

django-cms · django-cms

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)

django-cms · django-cms