Cross Site Scripting vulnerability in django-jsonform's admin form.

Description django-jsonform stores the raw JSON data of the db field in a hidden textarea on the admin page. However, that data was kept in the textarea after unescaping it using the safe template filter. This opens up possibilities for XSS attacks. This only affects the admin pages where the...

GHSA-X9JP-4W8M-4F3C Cross Site Scripting vulnerability in django-jsonform's admin form.

Description django-jsonform stores the raw JSON data of the db field in a hidden textarea on the admin page. However, that data was kept in the textarea after unescaping it using the safe template filter. This opens up possibilities for XSS attacks. This only affects the admin pages where the...

PT-2022-28290

Name of the Vulnerable Software and Affected Versions django-jsonform versions prior to 2.10.1 Description The issue allows for XSS attacks due to the storage of raw JSON data in a hidden textarea on the admin page, which is unescaped using the safe template filter. This affects admin pages where...