Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-93456 1 Batiste 1 Django-page-cms 2026-09-21 8.2 High
django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors, enabling stored cross-site scripting attacks.