GHSA-p5cm-246w-84jm
Medium · 6.1CVSS
6.1
EPSS
—
Published
Mar 3, 2026
CISA due date
—
The record
Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | wagtail | 0 | 6.3.8 |
| PyPI | wagtail | 6.4rc1 | 7.0.6 |
| PyPI | wagtail | 7.1rc1 | 7.2.3 |
| PyPI | wagtail | 7.3rc1 | 7.3.1 |
Related vulnerabilities
- CVE-2026-28222 Wagtail is an open source content management system built on Django. Same vulnerability
- CVE-2026-28223 Wagtail is an open source content management system built on Django. Also affects wagtail
- GHSA-p4v8-rw59-93cq Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface Also affects wagtail
- CVE-2026-25517 Wagtail is an open source content management system built on Django. Also affects wagtail
- GHSA-4qvv-g3vr-m348 Wagtail has improper permission handling on admin preview endpoints Also affects wagtail
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96382 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96368 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79