Description
In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most production sites since you shouldn't run with "DEBUG = True" (which makes this page accessible) in your production settings.
Remediation
References
Related Vulnerabilities
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.19)
Oracle Database Server CVE-2011-2322 Vulnerability (CVE-2011-2322)
PHP Numeric Errors Vulnerability (CVE-2016-4345)
SharePoint CVE-2021-40482 Vulnerability (CVE-2021-40482)
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4534)