Vendor
Django-wiki
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.4
Django-wiki - Stored Cross-Site Scripting (XSS) in Notifications Section
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the c…