Feed live

django CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,282

All time

Critical · Active

11,988

CVSS ≥ 9.0

New · 14 days

2,739

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 31–56 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-4894	medium	6.3/10	calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption	May 18, 2025 1y ago
CVE-2025-24370	critical	9.3/10	Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass	Feb 3, 2025 1y ago
CVE-2024-11406	medium	6.9/10	Stored XSS in django CMS Attributes Fields	Nov 20, 2024 1y ago
CVE-2024-11404	medium	5.5/10	File Upload Bypass in django Filer	Nov 20, 2024 1y ago
CVE-2024-11319	medium	4.8/10	Stored XSS in Open Source Project "django-cms"	Nov 18, 2024 1y ago
CVE-2024-32879	medium	4.9/10	social-auth-app-django Improper Handling of Case Sensitivity vulnerability	Apr 24, 2024 2y ago
CVE-2024-28865	high	7.5/10	django-wiki denial of service via regular expression	Mar 18, 2024 2y ago
CVE-2024-26164	high	8.8/10	Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability	Mar 12, 2024 2y ago
CVE-2024-2319	medium	5.4/10	Cross-Site Scripting vulnerability in Django MarkdownX	Mar 8, 2024 2y ago
CVE-2024-22199	critical	9.3/10	Django Template Engine Vulnerable to XSS	Jan 11, 2024 2y ago
CVE-2023-43791	critical	9.8/10	Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens	Nov 9, 2023 2y ago
CVE-2023-2954	medium	4.8/10	Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog	May 29, 2023 3y ago
CVE-2023-33185	medium	4.6/10	Incorrect signature verification in django-ses	May 26, 2023 3y ago
CVE-2017-20182	low	3.5/10	Mobile Vikings Django AJAX Utilities Backslash pagination.js Pagination cross site scripting	Mar 10, 2023 3y ago
CVE-2016-15010	low	3.5/10	University of Cambridge django-ucamlookup Lookup cross site scripting	Jan 5, 2023 3y ago
CVE-2022-4595	low	3.5/10	django-openipam exposed_hosts.html cross site scripting	Dec 18, 2022 3y ago
CVE-2022-4526	low	3.5/10	django-photologue Default Template photo_detail.html cross site scripting	Dec 15, 2022 3y ago
CVE-2021-43410	—	—	airavata-django-portal allows CRLF log injection because of the lack of escaping in the log statements	Dec 9, 2021 4y ago
CVE-2021-3994	high	8.8/10	Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk	Dec 1, 2021 4y ago
CVE-2021-25986	medium	5.4/10	Django-wiki - Stored Cross-Site Scripting (XSS) in Notifications Section	Nov 23, 2021 4y ago
CVE-2021-3950	high	8.8/10	Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk	Nov 19, 2021 4y ago
CVE-2021-3945	high	8.8/10	Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk	Nov 13, 2021 4y ago
CVE-2020-15225	high	7.5/10	Denial of Service vulnerability in django-filter	Apr 29, 2021 5y ago
CVE-2020-15105	medium	5.4/10	In Django Two-Factor Authentication, user passwords are stored in clear text in the Django session	Jul 10, 2020 6y ago
CVE-2020-4071	low	2.2/10	Timing attack on django-basic-auth-ip-whitelist	Jun 24, 2020 6y ago
CVE-2020-5224	medium	6.5/10	Session key exposure through session list in Django User Sessions	Jan 24, 2020 6y ago