1 matches found
Information Disclosure
djangousersessions is vulnerable to information disclosure. The vulnerability exists as the session key could be extracted from sessionlist.html through an XSS exploit...