Cross-site Scripting (XSS)

Django is vulnerable to cross-site scripting XSS attacks. The vulnerability exists because admin's add/change related popup adopts an unsafe usage of JavaScript's Element.innerHTML webapi...