Cross site scripting vulnerability in django-epiceditor（CVE-2017-6591）

Introduction django-epiceditor A django app that allows the easy addition of EpicEditor markdown editor to a django form field, whether in a custom app or the Django Admin. The project url: https://pypi.python.org/pypi/django-epiceditor Environment django==1.10.6 django-epiceditor==0.2.3...

CVE-2017-6591

CVE-2017-6591 affects django-epiceditor 0.2.3 and is a cross-site scripting (XSS) vulnerability triggered by crafted content in a form field. The root cause is an input handling flaw that allows malicious payloads to be reflected or processed in a way that could execute script in a victim’s brows...