D
Vendor security profile
django-cms
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit1
Patch rate%100
Avg. CVSS5.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
7
0
0
CVE KEV
CVE severity distribution
7toplam CVE
High1 (14%)
Medium6 (86%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%14
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
4.4
CVE-2026-75526
django CMS: Stored XSS in edit-mode plugin exception rendering
D
Patch verifiedEPSS %0
6.5
CVE-2026-63003
django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)
D
Patch verifiedEPSS %0
4.3
CVE-2026-61663
django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff
D
Patch verifiedEPSS %0
6.5
CVE-2026-54622
django CMS: Clipboard copy IDOR discloses unauthorized plugin content
D
Patch verifiedEPSS %0
6.5
CVE-2026-54624
django CMS: Structure endpoint bypasses page-view permission
D
Patch verifiedEPSS %0
7.1
CVE-2026-54623
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
D
Patch verifiedEPSS %0
4.8
CVE-2026-54625
django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)
D
Patch verifiedEPSS %0