https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:31:59.648713+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-08043 cnvd-2022-08043 2026-10-04T11:31:59.717157+00:00 cnvd-2022-08043 https://cve.radiocsirt.org/vuln/euvd-2026-33015 EUVD-2026-33015 2026-10-04T11:31:59.717194+00:00 EUVD-2026-33015 https://cve.radiocsirt.org/vuln/fkie_cve-2021-44649 fkie_cve-2021-44649 2026-10-04T11:31:59.717208+00:00

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.

 https://cve.radiocsirt.org/vuln/ghsa-hx7c-qpfq-xcrp GHSA-hx7c-qpfq-xcrp — Cross-site Scripting in django-cms 2026-10-04T11:31:59.717239+00:00

Affected: PyPI: django-cms

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.

 https://cve.radiocsirt.org/vuln/gsd-2021-44649 gsd-2021-44649 2026-10-04T11:31:59.717264+00:00 gsd-2021-44649 https://cve.radiocsirt.org/vuln/pysec-2022-7 PYSEC-2022-7 2026-10-04T11:31:59.717276+00:00

Affected: PyPI: django-cms

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.