← Back

Django Wiki Project

django-wiki_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Django Wiki
django-wiki
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-28865
1Django Wiki Project
1Django Wiki
Jun 17, 2026
Mar 18, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loo...Show more
django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.Show less
CVE-2021-25986
1Django Wiki Project
1Django Wiki
Jun 17, 2026
Nov 23, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a vic...Show more
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the payload in the notification panel renders and loads external JavaScript.Show less