cve.bz

CVE-2024-11406

6.9 mediumEPSS 0.5%

Medium (6.9). EPSS 0.5% chance of exploitation in the next 30 days. Fixed in djangocms-attributes-field 4.0.0.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0.

Severity

CVSS 3.1

6.9 medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE
CWE-79
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-vxcv-4xvf-pc22PyPIdjangocms-attributes-field<4.0.04.0.0
PYSEC-2026-1303PyPIdjangocms-attributes-field<4.0.04.0.0

References

Check your stackJSON