CVE-2024-2319

Published: 2024-03-08T14:15Z

Last Modified: 2025-02-26T15:14Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt