VYPR

PyPI package

django-markdownx

pkg:pypi/django-markdownx

Vulnerabilities (1)

  • CVE-2024-2319Mar 8, 2024
    affected <= 4.0.2

    Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.