CVE-2024-11406

Published November 20th, 2024

View on NVD ↗

CVSS v3

6.9

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS.This issue affects django CMS Attributes Fields: before 4.0.

django-cms/djangocms-attributes-field

An opinionated implementation of JSONField for arbitrary HTML element attributes.

GitHub

djangocms-attributes-field

Adds attributes to Django models.

Python Package Index