Skip to content
OpenAdvisories

Package · PyPI

django-jsonform

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-x9jp-4w8m-4f3c

    Cross Site Scripting vulnerability in django-jsonform's admin form.

    ### Description django-jsonform stores the raw JSON data of the db field in a hidden textarea on the admin page. However, that data was kept in the textarea after unescaping it using the `safe` template filter. This opens up possibilities for XSS attacks. Thi…

    django-jsonform PyPI