django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by CVE-2020-6816 via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by CVE-2020-6816 via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: CVE-2020-6816 Source advisory: OSV:GHSA-M6XF-FQ7Q-8...

Cross-Site Scripting (XSS)

openslides is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of strings from CKEditor...