Description

Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.

Remediation

References

CVE-2010-3082

Related Vulnerabilities

Oracle Database Server CVE-2007-2118 Vulnerability (CVE-2007-2118)

WordPress 4.3.x Arbitrary File Deletion Vulnerability (4.3 - 4.3.16)

SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-54897)

WordPress Plugin WP e-Commerce Shop Styling Local File Inclusion (2.9.1)

WordPress Ultimate Member Plugin Improper Privilege Management Vulnerability (CVE-2020-36156)

Severity

Medium

Classification

CVE-2010-3082 CWE-707

Tags

Missing Update Known Vulnerabilities