Cpe:2.3:a:django:django_page_cms:*:*:*:*:*:*:*:*

An improper CSRF protection flaw in django-page-cms versions up to 2.0.13 enables attackers to force authenticated editors to inject stored XSS payloads.