← ターゲット選定に戻る

CMS

wagtail/wagtail

A Django content management system focused on flexibility and user experience

#python#django#cms#wagtail#hacktoberfest

スコア

75

/ 100

Star

20,324

Fork

4,519

Open Issue

843

サイズ

248MB

言語

Python ★

最終push

0 日前

Docker

—

採点内訳

過去CVE 20件 (やや多い)

✓

直近 push: 0 日前

✓

得意言語 (Python)

✓

オープンissue 843件

✓

大規模 (248MB)

—

Docker 未対応

—

10k–50k: 中級 (★20,324)

—

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (20 件)

MEDIUMGHSA-67rv-mg8q-5pf3 CVE-2026-442002026/5/5
Improper permission handling when copying pages
MEDIUMGHSA-p5gm-92h4-6pv6 CVE-2026-442012026/5/5
Improper restriction handling on Documents and Images API
MEDIUMGHSA-pwm3-7fv4-g6xx CVE-2026-441992026/5/5
Improper permission handling when deleting form submissions
MEDIUMGHSA-c4mr-889m-vgf6 CVE-2026-441982026/5/5
Improper permission handling when viewing page history
MEDIUMGHSA-c6wj-9vcj-75pj CVE-2026-441972026/5/5
Improper permission handling when comparing revisions
MEDIUMGHSA-p4v8-rw59-93cq CVE-2026-282232026/3/3
Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface
MEDIUMGHSA-p5cm-246w-84jm CVE-2026-282222026/3/3
Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributes
MEDIUMGHSA-4qvv-g3vr-m348 CVE-2026-255172026/2/3
Improper permission handling on admin preview endpoints
MEDIUMGHSA-jmp3-39vp-fwg8 CVE-2024-393172024/7/11
Regular expression denial-of-service via search query parsing
MEDIUMGHSA-xxfm-vmcf-g33f CVE-2024-352282024/5/30
Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
LOWGHSA-w2v8-php4-p8hc CVE-2024-328822024/5/1
Permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`
LOWGHSA-fc75-58r8-rm3h CVE-2023-458092023/10/19
Disclosure of user names via admin bulk action views
MEDIUMGHSA-33pv-vcgh-jfg9 CVE-2023-288372023/4/3
Denial-of-service via memory exhaustion when uploading large files
MEDIUMGHSA-5286-f2rf-35c2 CVE-2023-288362023/4/3
Stored XSS attack via ModelAdmin views
LOWGHSA-xqxm-2rpm-3889 CVE-2022-216832022/1/18
Comment reply notifications sent to incorrect users
MEDIUMGHSA-xfrw-hxr5-ghqf CVE-2021-326812021/6/17
Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks
MEDIUMGHSA-wq5h-f9p5-q7fx CVE-2021-294342021/4/19
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
MEDIUMGHSA-2473-9hgq-j7xw CVE-2020-151182020/7/20
HTML injection through form field help text
LOWGHSA-jjjr-3jcw-f8v6 CVE-2020-110372020/5/4
Potential timing attack on password-protected private pages
MEDIUMGHSA-v2wc-pfq2-5cm6 CVE-2020-110012020/4/14
Possible XSS attack via page revision comparison view