VULNERABILITY INTELLIGENCE
CVE-2024-11319
CVSS score4.8 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2024-11-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django-cms allows Cross-Site Scripting (XSS). This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3.
Weakness classification
- iletisim@usom.gov.tr: CWE-79
Primary references
- iletisim@usom.gov.tr — Patch
- iletisim@usom.gov.tr — Exploit
- iletisim@usom.gov.tr
- iletisim@usom.gov.tr — Vendor Advisory
- iletisim@usom.gov.tr — Third Party Advisory