p PatchFirst

CVE-2024-11319

CVE-2024-11319 · Stored XSS in Open Source Project "django-cms"

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django-cms allows Cross-Site Scripting (XSS). This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3.

CVSS 4.8 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • django-cms

    Versions
    • 3.11.7: Affected (custom)
    • 3.11.8: Affected (custom)
    • 4.1.2: Affected (custom)
    • 4.1.3: Affected (custom)
    • 4.1.4: Not affected (custom)

    Update to 4.1.4

  • django-cms PyPI

    Versions
    • 3.11.7
    • 3.11.8
    Affected ranges
    • ECOSYSTEM: ≥ 3.11.7, < 3.11.9

    Update to 3.11.9

  • django-cms PyPI

    Versions
    • 4.1.2
    • 4.1.3
    Affected ranges
    • ECOSYSTEM: ≥ 4.1.2, < 4.1.4

    Update to 4.1.4

Original sources

Check your server →