Description
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.
Remediation
References
Related Vulnerabilities
WordPress Plugin Slideshow Pro Arbitrary File Upload (2.4)
WebLogic CVE-2017-10147 Vulnerability (CVE-2017-10147)
WordPress Plugin Testimonial-Best Testimonial Slider Cross-Site Scripting (2.1.6)
XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-32068)
WordPress Plugin Product Lister for Walmart Remote Code Execution (1.0.1)