Description
Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields, as demonstrated by a @property.
Remediation
References
Related Vulnerabilities
PHP Use After Free Vulnerability (CVE-2018-12882)
Jenkins Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-47803)
MediaWiki Improper Authentication Vulnerability (CVE-2021-36128)
ProjectSend Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53905)
WordPress Plugin Zingiri Web Shop Cross-Site Scripting (2.4.2)