{"action":"Upgrade django-cms to 3.11.9 or later.","affected":[{"fixed":"3.11.9","introduced":"3.11.7"},{"fixed":"4.1.4","introduced":"4.1.2"}],"component":"django-cms","cve_ids":["CVE-2024-11319"],"ecosystem":"PyPI","epss":0.00541,"exploited":false,"fixed_versions":["3.11.9","4.1.4"],"ghsa_id":"GHSA-gv5h-5655-h4mv","id":"tcs_01M5KFJ8W5X4EC5N74T8A8DCGG","modified_at":"2026-06-10T18:44:48Z","published_at":"2024-11-18T12:30:43Z","references":["https://osv.dev/vulnerability/GHSA-gv5h-5655-h4mv","https://nvd.nist.gov/vuln/detail/CVE-2024-11319","https://github.com/django-cms/django-cms/commit/241d1cbe47a68f5d271ce4d27ad5e32e2c360ec3","https://github.com/django-cms/django-cms","https://github.com/pypa/advisory-database/tree/main/vulns/django-cms/PYSEC-2024-124.yaml","https://iltosec.com/blog/post/django-cms-413-stored-xss-vulnerability-exploiting-the-page-title-field","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1859","https://www.django-cms.org/en/blog/2024/11/13/django-cms-security-update","https://www.usom.gov.tr/bildirim/tr-24-1859"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-gv5h-5655-h4mv","url":"https://osv.dev/vulnerability/GHSA-gv5h-5655-h4mv"}],"summary":"django CMS Cross-Site Scripting (XSS)"}