Threats affecting pkg:pypi/django-page-cms

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.5%	CVE-2026-93455batiste django-page-cms · Missing Authorization High7.1EPSS 0.5%2026-09-18CVE Database V5CVE-2026-93455 django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. Attackers with low-privilege staff credentials can enumerate content identifiers and access unpublished drafts, page listings, and file paths without proper authorization checks. EPSS 0.5%Vulnerability	CVE Database V5	2026-09-18

Page 1 of 1