EUVD-2021-0058

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Unicorn framework 0.35.3 for Django has XSS vulnerability via component.name exposure

Reporter	Title	Published	Views	Family All 18
0day.today	django-unicorn 0.35.3 - Stored Cross-Site Scripting Vulnerability	8 Oct 202100:00	–	zdt
Circl	CVE-2021-42053	7 Oct 202112:33	–	circl
CNNVD	Django 跨站脚本漏洞	7 Oct 202100:00	–	cnnvd
CNVD	Django Cross-Site Scripting Vulnerability (CNVD-2022-31939)	10 Oct 202100:00	–	cnvd
CVE	CVE-2021-42053	7 Oct 202105:21	–	cve
Cvelist	CVE-2021-42053	7 Oct 202105:21	–	cvelist
Exploit DB	django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS)	8 Oct 202100:00	–	exploitdb
Github Security Blog	Cross-site scripting in Unicorn framework	12 Oct 202117:51	–	github
NVD	CVE-2021-42053	7 Oct 202106:15	–	nvd
OSV	GHSA-C87F-FQ5G-63R2 Cross-site scripting in Unicorn framework	12 Oct 202117:51	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "62b502c1-2611-3a2d-adca-159f09c9d354",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "553d1997-8eaa-33c2-bc75-7aa6cd178396",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/adamghill/django-unicorn/pull/288/files
github	www.github.com/advisories/GHSA-c87f-fq5g-63r2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42053
github	www.github.com/adamghill/django-unicorn/commit/aa5b9835d946bd9893ef02e556859e3ea62cc5e2
github	www.github.com/adamghill/django-unicorn/compare/0.35.3...0.36.0
github	www.github.com/pypa/advisory-database/tree/main/vulns/django-unicorn/PYSEC-2021-357.yaml
packetstormsecurity	www.packetstormsecurity.com/files/164442/django-unicorn-0.35.3-Cross-Site-Scripting.html
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2021-42053
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4

CVSS 23.5

EPSS0.00308