Django Page Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:batiste:django-page-cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Batiste (a77f9014-775a-5f49-b6b5-f1e4a8a63f9f) |
|---|---|
| Product | Django Page Cms (a9d5b94b-e4ce-5d60-96e9-7931186cbcad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-93456 |
vulnerable | 2026-10-13 12:28:56.145129 |
django-page-cms through 2.0.13 CSRF via admin mutation views
HIGH (8.2)
django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors, enabling stored cross-site scripting attacks.
Published: 2026-09-18T01:24:04.861Z
Updated: 2026-09-24T14:23:03.455Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93455 |
vulnerable | 2026-10-13 12:28:56.003243 |
django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account
MEDIUM (6.5)
django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. Attackers with low-privilege staff credentials can enumerate content identifiers and access unpublished drafts, page listings, and file paths without proper authorization checks.
Published: 2026-09-18T01:24:04.211Z
Updated: 2026-09-24T14:23:02.475Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.