Most recent entries from all

cnvd-2016-05212

EUVD-2026-85733

fkie_cve-2016-6186

Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML.

GHSA-c8c8-9472-w52h — Django Cross-site scripting Vulnerability

Affected: PyPI: Django

Cross-site scripting (XSS) vulnerability in the `dismissChangeRelatedObjectPopup` function in `contrib/admin/static/admin/js/admin/RelatedObjectLookups.js` in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML.

gsd-2016-6186

PYSEC-2016-2

Affected: PyPI: django

RHSA-2016:1594 — Red Hat Security Advisory: python-django security update

django: XSS in admin's add/change related popup

UBUNTU-CVE-2016-6186

Affected: Ubuntu:16.04:LTS: python-django