Vulnerabilidades em wagtail

25 resultados
Análise Vexday

O Wagtail apresenta 25 vulnerabilidades catalogadas, com 10 delas publicadas nos últimos 90 dias, indicando atividade contínua de descobertas. Não há registros de exploração ativa em campo (KEV) nem vulnerabilidades críticas, reduzindo o risco imediato. A fraqueza dominante é CWE-280 (Improper Handling of Insufficient Permissions), sugerindo problemas recorrentes de controle de acesso que demandam atenção em atualizações de segurança.

CVE-2020-11001MEDIUMPossible XSS attack in WagtailEPSS 1.3%CVE-2021-32681MEDIUMImproper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocksEPSS 1.1%CVE-2020-15118MEDIUMCross-Site Scripting in WagtailEPSS 1.1%CVE-2023-28837MEDIUMWagtail vulnerable to denial-of-service via memory exhaustion when uploading large filesEPSS 1.1%CVE-2022-21683LOWComment reply notifications sent to incorrect users in wagtailEPSS 1.0%CVE-2023-28836MEDIUMWagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin viewsEPSS 0.8%CVE-2021-29434MEDIUMImproper validation of URLs ('Cross-site Scripting') in Wagtail rich text fieldsEPSS 0.6%CVE-2024-39317MEDIUMWagtail regular expression denial-of-service via search query parsingEPSS 0.6%CVE-2024-32882LOWPermission check bypass when editing a model with per-field restrictions in wagtailEPSS 0.5%CVE-2026-28223MEDIUMWagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interfaceEPSS 0.5%CVE-2023-45809LOWDisclosure of user names via admin bulk action views in wagtailEPSS 0.5%CVE-2026-28222MEDIUMWagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributesEPSS 0.4%CVE-2026-25517MEDIUMWagtail has improper permission handling on admin preview endpointsEPSS 0.3%CVE-2024-35228MEDIUMImproper Handling of Insufficient Permissions in WagtailEPSS 0.3%CVE-2026-44201MEDIUMWagtail: Improper restriction handling on Documents and Images APIEPSS 0.3%CVE-2020-11037MEDIUMPotential Observable Timing Discrepancy in WagtailEPSS 0.3%CVE-2026-54260MEDIUMWagtail: Denial of service via unbounded filter specs in the image previewEPSS 0.2%CVE-2026-44197MEDIUMWagtail: Improper permission handling when comparing revisionsEPSS 0.2%CVE-2026-54263HIGHWagtail: Reflected XSS in dynamic image URL generator viewEPSS 0.2%CVE-2026-44200MEDIUMWagtail: Improper permission handling when copying pagesEPSS 0.2%