Description
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, a low-level user with the -Can submit translation- permission can create translations for any page, including those they do not have permissions for. This issue has been fixed in versions 7.0.8, 7.3.3, and 7.4.2.
CVSS 4.3EPSS 0.16199999999999998%Risk 0.44
View source- Published
- 2026-07-01 22:16:49
- Affected versions
- <7.0.8,<7.3.3,<7.4.2
- Type
- Web application
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N