Description
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Django MarkdownX | Django MarkdownX | 4.0.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | django-markdownx | <= 4.0.2 | — | GHSA-fvx8-79hx-x82f |