Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-2319

Cross-Site Scripting vulnerability in Django MarkdownX

Description

Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Django MarkdownX Django MarkdownX

Default version status: unaffected

  • 4.0.2affected

References