Description

Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField.

Remediation

References

CVE-2013-4249

Related Vulnerabilities

WordPress Plugin Select All Categories and Taxonomies, Change Checkbox to Radio Buttons Cross-Site Scripting (1.3.1)

WordPress Plugin Slimstat Analytics Cross-Site Scripting (3.9.1)

MySQL CVE-2016-9843 Vulnerability (CVE-2016-9843)

osTicket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-14396)

Java Unspesificed Vulnerability (CVE-2018-3183)

Severity

Medium

Classification

CVE-2013-4249 CWE-707

Tags

Missing Update Known Vulnerabilities