CVE-2026-54622

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the copy_plugins endpoint in cms/admin/placeholderadmin.py authorizes only the destination clipboard. The _copy_plugin_to_clipboard and _copy_placeholder_to_clipboard paths accept source_placeholder_id and source_plugin_id values but use has_copy_plugins_permission and check_source only for the requesting user’s clipboard, without validating the source placeholder. Under CMS_PERMISSION, a staff user with the global add permission for a plugin type can copy plugins from an unauthorized page or placeholder into the user’s clipboard and read secret text, link names, and URLs. This issue is fixed in versions 5.0.8.

• CWE-639

• https://github.com/django-cms/django-cms/commit/7642a98ab3170793c0b27b4125dd1f3d318b8a1c
• https://github.com/django-cms/django-cms/pull/8645
• https://github.com/django-cms/django-cms/releases/tag/5.0.8
• https://github.com/django-cms/django-cms/security/advisories/GHSA-4xfr-4p46-gc6p

Published

Aug 20, 2026

Last Modified

Sep 9, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54617GravitLauncher is an open-source Minecraft launcher based on…9.8
• CVE-2026-54618Obsidian Web MCP is a secure remote MCP server for Obsidian …9.4
• CVE-2026-54619sqlite3 provides Ruby bindings for the SQLite3 embedded data…2
• CVE-2026-5462A vulnerability was identified in Wahoo Fitness SYSTM App up…3.3
• CVE-2026-54620sqlite3 provides Ruby bindings for the SQLite3 embedded data…2
• CVE-2026-54621datamodel-code-generator generates Python data models from s…7.8
• CVE-2026-54623django CMS is an easy-to-use and developer-friendly enterpri…7.1
• CVE-2026-54624django CMS is an easy-to-use and developer-friendly enterpri…6.5
• CVE-2026-54625django CMS is a content management system powered by Django.…4.8
• CVE-2026-54626SAIL is a cross-platform library for loading and saving imag…9.8
• CVE-2026-54627SAIL is a cross-platform library for loading and saving imag…9.8
• CVE-2026-54628Anyquery is an SQL query engine built on top of SQLite. Prio…8.6