medium5.4
CVE-2024-2319
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
Impact
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | django-markdownx | <= 4.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Neutronx | Markdownx | Version 4.0.2 |