VendorsTorchboxwagtailany version
Vulnerabilities

Torchbox Wagtail any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

23CVEs
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
Published 2026-07-01 · Analyzed
7.3EPSS 0.004
CVE-2020-11001
Possible XSS attack in Wagtail
Published 2020-04-14 · Modified
6.8EPSS 0.013
CVE-2024-39317
Wagtail regular expression denial-of-service via search query parsing
Published 2024-07-11 · Analyzed
6.5EPSS 0.006
CVE-2026-44197
Wagtail: Improper permission handling when comparing revisions
Published 2026-05-11 · Analyzed
6.5EPSS 0.003
CVE-2026-54261
Wagtail: Improper permission handling in image preview
Published 2026-07-01 · Analyzed
6.5EPSS 0.003
CVE-2026-44200
Wagtail: Improper permission handling when copying pages
Published 2026-05-11 · Analyzed
6.5EPSS 0.003
CVE-2026-44199
Wagtail: Improper permission handling when deleting form submissions
Published 2026-05-11 · Analyzed
6.5EPSS 0.003
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Published 2023-04-03 · Modified
6.4EPSS 0.008
CVE-2021-29434
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Published 2021-04-19 · Modified
6.1EPSS 0.006
CVE-2026-28222
Wagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributes
Published 2026-03-05 · Analyzed
6.1EPSS 0.006
CVE-2026-28223
Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface
Published 2026-03-05 · Analyzed
6.1EPSS 0.006
CVE-2020-11037
Potential Observable Timing Discrepancy in Wagtail
Published 2020-04-30 · Modified
6.1EPSS 0.003
CVE-2020-15118
Cross-Site Scripting in Wagtail
Published 2020-07-20 · Modified
5.7EPSS 0.011
CVE-2021-32681
Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks
Published 2021-06-17 · Modified
5.4EPSS 0.011
CVE-2026-44201
Wagtail: Improper restriction handling on Documents and Images API
Published 2026-05-11 · Analyzed
5.3EPSS 0.003
CVE-2026-25517
Wagtail has improper permission handling on admin preview endpoints
Published 2026-02-04 · Analyzed
5.1EPSS 0.004
CVE-2023-28837
Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
Published 2023-04-03 · Modified
4.9EPSS 0.011
CVE-2022-21683
Comment reply notifications sent to incorrect users in wagtail
Published 2022-01-18 · Modified
4.3EPSS 0.010
CVE-2026-54260
Wagtail: Denial of service via unbounded filter specs in the image preview
Published 2026-07-01 · Analyzed
4.3EPSS 0.004
CVE-2026-44198
Wagtail: Improper permission handling when viewing page history
Published 2026-05-11 · Analyzed
4.3EPSS 0.003
CVE-2026-54259
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
Published 2026-07-01 · Analyzed
4.3EPSS 0.003
CVE-2026-54262
Wagtail: Pages translations can be created without page permissions when using simple_translation
Published 2026-07-01 · Analyzed
4.3EPSS 0.003
CVE-2023-45809
Disclosure of user names via admin bulk action views in wagtail
Published 2023-10-19 · Modified
2.7EPSS 0.005