Cross Site Scripting vulnerability in django-jsonform's admin form.

Description django-jsonform stores the raw JSON data of the db field in a hidden textarea on the admin page. However, that data was kept in the textarea after unescaping it using the safe template filter. This opens up possibilities for XSS attacks. This only affects the admin pages where the...

GHSA-X9JP-4W8M-4F3C Cross Site Scripting vulnerability in django-jsonform's admin form.

Description django-jsonform stores the raw JSON data of the db field in a hidden textarea on the admin page. However, that data was kept in the textarea after unescaping it using the safe template filter. This opens up possibilities for XSS attacks. This only affects the admin pages where the...