CVE-2011-0697

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

CVE-2010-3082

CVE-2010-3082 is a cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 where a crafted csrfmiddlewaretoken (csrf_token) cookie enables remote attackers to inject arbitrary script/HTML. The issue affects Django 1.2.x prior to 1.2.2 and is caused by improper handling of the csrf_t...