CVE-2023-2954

Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...

CVE-2023-2954 Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog

Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...

CVE-2023-2954 Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog

Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...

CVE-2023-2954

CVE-2023-2954 is a stored XSS in the DjangoBlog project liangliangyy/djangoblog prior to master. Connected sources confirm the vulnerability arises from handling Markdown comments, enabling script execution when users view or interact with comments. PoCs and documented payloads exist (Huntr, etc....