https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T15:11:12.561469+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-93456 CVE-2026-93456 — django-page-cms through 2.0.13 CSRF via admin mutation views 2026-09-28T15:11:12.563419+00:00

Affected: batiste django-page-cms

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors, enabling stored cross-site scripting attacks.