CVE-2020-11001

In Wagtail before versions 2.8.1 and 2.7.2, a cross-site scripting (XSS) vulnerability exists on the page revisioncomparison view within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtailadmin could potentially craft a page revision history that, when viewe...