Known vulnerabilities in wagtail - page 2

Vendor: Torchbox
Software: wagtail
Software CPE: cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:django:*:*
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting wagtail wagtail is affected by 35 known vulnerabilities: 8 medium, 27 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU156670 - Incorrect Authorization
CWE-863 Low
No
No
7.0.10, 7.4.4, 8.0.1 21.10.2026 SB2026102187
#VU156669 - Improper Neutralization of Formula Elements in a CSV File
CWE-1236 Medium
No
No
7.0.10, 7.4.4, 8.0.1 21.10.2026 SB2026102187
#VU156668 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Low
No
No
8.0.1 21.10.2026 SB2026102187
#VU156667 - Improper Handling of Insufficient Permissions or Privileges
CWE-280 Low
No
No
7.0.10, 7.4.4, 8.0.1 21.10.2026 SB2026102187
#VU156666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.0.10, 7.4.4, 8.0.1 21.10.2026 SB2026102187
#VU94376 - Inefficient Regular Expression Complexity
CVE-2024-39317
CWE-1333 Medium
No
No
5.2.6, 6.0.6, 6.1.3 16.07.2024 SB2024071643
#VU90114 - Permissions, Privileges, and Access Controls
CVE-2024-35228
CWE-264 Low
No
No
6.0.5, 6.1.2 31.05.2024 SB2024053139
#VU89161 - Permissions, Privileges, and Access Controls
CVE-2024-32882
CWE-264 Low
No
No
6.0.3, 6.1 06.05.2024 SB2024050621
#VU82274 - Direct Request ('Forced Browsing')
CVE-2023-45809
CWE-425 Low
No
No
4.1.9, 5.0.5, 5.1.3, 5.2 rc1 20.10.2023 SB2023102015
#VU74378 - Resource exhaustion
CVE-2023-28837
CWE-400 Low
No
No
4.1.4, 4.2.2 04.04.2023 SB2023040424
#VU74353 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28836
CWE-79 Low
No
No
4.1.4, 4.2.2 04.04.2023 SB2023040424
#VU54226 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32681
CWE-79 Low
No
No
2.11.8, 2.12.5, 2.13.2 18.06.2021 SB2021061813
#VU52331 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29434
CWE-79 Low
No
No
2.11.7, 2.12.4 19.04.2021 SB2021041916
#VU31888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15118
CWE-79 Low
No
No
2.7.4, 2.9.3 27.07.2020 SB2020072732
#VU27016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11001
CWE-79 Low
No
No
2.7.2, 2.8.1 20.04.2020 SB2020042001


Showing elements 21 - 40 out of 35