Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.9	EPSS 0.5%	CVE-2024-11406django CMS Attributes Fields · XSS or 'Cross-site Scripting' Medium6.9EPSS 0.5%2024-11-20CVE Database V5CVE-2024-11406 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0. EPSS 0.5%Vulnerability django CMS Association CWE-79	CVE Database V5	2024-11-20
Medium	5.5	EPSS 0.4%	CVE-2024-11404django Filer · Unrestricted File Upload Medium5.5EPSS 0.4%2024-11-20CVE Database V5CVE-2024-11404 Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3. EPSS 0.4%Vulnerability django CMS Association CWE-434	CVE Database V5	2024-11-20
Medium	4.8	EPSS 0.5%	CVE-2024-11319django-cms · XSS or 'Cross-site Scripting' Medium4.8EPSS 0.5%2024-11-18CVE Database V5CVE-2024-11319 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django-cms allows Cross-Site Scripting (XSS). This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3. EPSS 0.5%Vulnerability django CMS Association CWE-79	CVE Database V5	2024-11-18

Page 1 of 1