https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:42:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-310032 EUVD-2026-310032 https://cve.radiocsirt.org/vuln/euvd-2026-310032 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44199 <p>Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don&#39;t have access to by crafting a form submission to delete submissions on a page they do have access to for submissions they don&#39;t. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.</p> <p>Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don&#39;t have access to by crafting a form submission to delete submissions on a page they do have access to for submissions they don&#39;t. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44199 https://cve.radiocsirt.org/vuln/ghsa-pwm3-7fv4-g6xx <p><strong>Affected:</strong> PyPI: wagtail</p> <p>### Impact</p> <p>A CMS user with limited access to form pages could delete submissions to form pages they don&#39;t have access to by crafting a form submission to delete submissions on a page they do have access to for submissions they don&#39;t.</p> <p>The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin.</p> <p>### Patches</p> <p>Patched versions have been released as Wagtail 7.0.7 and 7.3.2. The new 7.4 LTS feature release also incorporates this fix.</p> <p>### Workarounds</p> <p>No workaround is available.</p> <p>### Acknowledgements</p> <p>Wagtail thanks Vishal Shukla @shukla304 for reporting this issue.</p> <p>### For more information If there are any questions or comments about this advisory:</p> <p>* Visit Wagtail&#39;s [support channels](https://docs.wagtail.org/en/stable/support.html) * Send an email to [security@wagtail.org](mailto:security@wagtail.org) (view the [security policy](https://github.com/wagtail/wagtail/security/policy) for more information).</p> <p><strong>Affected:</strong> PyPI: wagtail</p> <p>### Impact</p> <p>A CMS user with limited access to form pages could delete submissions to form pages they don&#39;t have access to by crafting a form submission to delete submissions on a page they do have access to for submissions they don&#39;t.</p> <p>The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin.</p> <p>### Patches</p> <p>Patched versions have been released as Wagtail 7.0.7 and 7.3.2. The new 7.4 LTS feature release also incorporates this fix.</p> <p>### Workarounds</p> <p>No workaround is available.</p> <p>### Acknowledgements</p> <p>Wagtail thanks Vishal Shukla @shukla304 for reporting this issue.</p> <p>### For more information If there are any questions or comments about this advisory:</p> <p>* Visit Wagtail&#39;s [support channels](https://docs.wagtail.org/en/stable/support.html) * Send an email to [security@wagtail.org](mailto:security@wagtail.org) (view the [security policy](https://github.com/wagtail/wagtail/security/policy) for more information).</p> https://cve.radiocsirt.org/vuln/ghsa-pwm3-7fv4-g6xx https://cve.radiocsirt.org/vuln/pysec-2026-148 <p><strong>Affected:</strong> PyPI: wagtail</p> <p>Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don&#39;t have access to by crafting a form submission to delete submissions on a page they do have access to for submissions they don&#39;t. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.</p> <p><strong>Affected:</strong> PyPI: wagtail</p> <p>Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don&#39;t have access to by crafting a form submission to delete submissions on a page they do have access to for submissions they don&#39;t. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.</p> https://cve.radiocsirt.org/vuln/pysec-2026-148