CVE-2021-44649

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting…

published January 12, 2022

CVSS
—
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00617 · 48.9th percentile
Published
2022-01-12T12:57Z
EPSS history
Timeline
  • 12 JAN 12:57Z
    Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting…
    cvelistv5