Description

Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField.

Remediation

References

CVE-2013-4249

Related Vulnerabilities

WebLogic CVE-2020-2544 Vulnerability (CVE-2020-2544)

WordPress Plugin Mapwiz SQL Injection (1.0.1)

WordPress Plugin Responsive Filterable Portfolio Unspecified Vulnerability (1.0.8)

WordPress Plugin Twenty20 Image Before-After Cross-Site Scripting (1.5.9)

Jboss EAP Improper Privilege Management Vulnerability (CVE-2019-14838)

Severity

Medium

Classification

CVE-2013-4249 CWE-707

Tags

Missing Update Known Vulnerabilities