21 matches found
django: Possible XSS via '{% debug %}' template tag
A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...