Homepage
About Snyk

django-cms@3.5.0 vulnerabilities

Lean enterprise content management powered by Django.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the django-cms package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary Code Execution

Affected versions of this package are vulnerable to Arbitrary Code Execution. It does not validate plugin_type parameter while generating the error messages for invalid plugin types. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of an affected user.

How to fix Arbitrary Code Execution?

Upgrade django-cms to version 3.4.7, 3.5.4, 3.6.1, 3.7.4 or higher.

[3.4.0,3.4.7) [3.5.0,3.5.4) [3.6.0,3.6.1) [3.7.0,3.7.4)
Go back to all versions of this package