Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4249)

Description

Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField.

Remediation

References

CVE-2013-4249

Related Vulnerabilities

PHP Numeric Errors Vulnerability (CVE-2007-3996)

Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8861)

WordPress Plugin Adavnced Video embed Local File Inclusion (1.0)

Claroline Other Vulnerability (CVE-2006-3257)

MySQL Observable Discrepancy Vulnerability (CVE-2019-1559)

Severity

Medium

Classification

CVE-2013-4249 CWE-707