Skip to content
OpenAdvisories

Package · PyPI

slippers

1 known vulnerabilities.

1 result · Feed

  • Medium 6.1

    Slippers: Cross-Site Scripting (XSS) in `attrs` Template Tag

    Slippers is a UI component framework for Django. Prior to version 0.6.3, a Cross-Site Scripting (XSS) vulnerability exists in the {% attrs %} template tag of the slippers Django package. When a context variable containing untrusted data is passed to {% attrs …