https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:57:48 +0000 https://cve.radiocsirt.org/vuln/cve-2020-11001 <p><strong>Affected:</strong> wagtail</p> <p>In Wagtail before versions 2.8.1 and 2.7.2, a cross-site scripting (XSS) vulnerability exists on the page revision comparison view within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin could potentially craft a page revision history that, when viewed by a user with higher privileges, could perform actions with that user&#39;s credentials. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin.</p> <p>Patched versions have been released as Wagtail 2.7.2 (for the LTS 2.7 branch) and Wagtail 2.8.1 (for the current 2.8 branch).</p> <p><strong>Affected:</strong> wagtail</p> <p>In Wagtail before versions 2.8.1 and 2.7.2, a cross-site scripting (XSS) vulnerability exists on the page revision comparison view within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin could potentially craft a page revision history that, when viewed by a user with higher privileges, could perform actions with that user&#39;s credentials. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin.</p> <p>Patched versions have been released as Wagtail 2.7.2 (for the LTS 2.7 branch) and Wagtail 2.8.1 (for the current 2.8 branch).</p> https://cve.radiocsirt.org/vuln/cve-2020-11001