alyx-local (>=3.1.2 <=3.1.8), blog-hj3415 (>=0.0.1 <=0.3.2) +14 more potentially affected by CVE-2024-2319 via django-markdownx (>=1.7.1 <=4.0.11)

django-markdownx PYPI version =1.7.1, =3.1.2, =0.0.1, =5.0.0, =1.0.0, =1.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =0.1.3, =5.0.1, =1.2.4, =1.5.4 and more Source cves: CVE-2024-2319 Source advisory: OSV:GHSA-FVX8-79HX-X82F...

CVE-2024-2319

Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...

CVE-2024-2319 Cross-Site Scripting vulnerability in Django MarkdownX

Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...

CVE-2024-2319

The CVE-2024-2319 entry corresponds to a Cross-Site Scripting (XSS) vulnerability in Django MarkdownX, affecting version 4.0.2. The issue arises from insufficient sanitisation of JavaScript elements in the upload functionality, enabling an attacker to store a crafted JavaScript payload. Documente...

CVE-2024-2319 Cross-Site Scripting vulnerability in Django MarkdownX

Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...