https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:18:21.844224+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-93456 fkie_cve-2026-93456 2026-09-28T16:18:21.870060+00:00

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors, enabling stored cross-site scripting attacks.

 https://db.gcve.eu/vuln/ghsa-5j3h-q5f7-g2vq GHSA-5j3h-q5f7-g2vq 2026-09-28T16:18:21.870161+00:00

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors, enabling stored cross-site scripting attacks.