| Package | Affected versions | Patched versions |
|---|---|---|
| django-markdownx | ≤ 4.0.2 | |
| markdownx | = 4.0.2 |
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free