En resumen
- CVE-2024-2319 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a django-markdownx, markdownx (neutronx).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.39%, mayor que el 33.3% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.
NVD description
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free