CVE-2021-44649 | Django CMS Error Message cross site scripting

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

1	21
0	20

source_cve_nvd_summary	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

source_cve_nvd_summary

exploit_price_0day

vulnerability_cvss3_meta_tempscore

vulnerability_cvss3_meta_basescore

vulnerability_cvss3_vuldb_tempscore

90%	29
50%	11
70%	1

90%

50%

70%

90%	29
80%	11
70%	1

90%

80%

70%

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
12050157	01/15/2022	VulD...	cve_nvd_summary	Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.	cve.mitre.org	01/15/2022	accepted	70
12037272	01/12/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	01/12/2022	accepted	90
12037271	01/12/2022	VulD...	cvss3_meta_tempscore	3.4	see CVSS documentation	01/12/2022	accepted	90
12037270	01/12/2022	VulD...	cvss3_meta_basescore	3.5	see CVSS documentation	01/12/2022	accepted	90
12037269	01/12/2022	VulD...	cvss3_vuldb_tempscore	3.4	see CVSS documentation	01/12/2022	accepted	90
12037268	01/12/2022	VulD...	cvss3_vuldb_basescore	3.5	see CVSS documentation	01/12/2022	accepted	90
12037267	01/12/2022	VulD...	cvss2_vuldb_tempscore	3.5	see CVSS documentation	01/12/2022	accepted	90
12037266	01/12/2022	VulD...	cvss2_vuldb_basescore	4.0	see CVSS documentation	01/12/2022	accepted	90
12037265	01/12/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	01/12/2022	accepted	80
12037264	01/12/2022	VulD...	cvss3_vuldb_pr	L	derived from historical data	01/12/2022	accepted	80
12037263	01/12/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/12/2022	accepted	80
12037262	01/12/2022	VulD...	cvss2_vuldb_au	S	derived from historical data	01/12/2022	accepted	80
12037261	01/12/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	01/12/2022	accepted	80
12037260	01/12/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	01/12/2022	accepted	80
12037259	01/12/2022	VulD...	cvss2_vuldb_ai	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12037258	01/12/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12037257	01/12/2022	VulD...	cvss2_vuldb_ci	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12037256	01/12/2022	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	01/12/2022	accepted	80
12037255	01/12/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12037254	01/12/2022	VulD...	type	Content Management System		01/12/2022	accepted	90

Commited

User

Field

Change

Remarks

Accepted

Reason

Django CMS 3.7.3 Error Message plugin_type cross site scripting

🔒 Login Required

Are you interested in using VulDB?