Field Assessment
AI analysis pending.
CVE
CVE-2011-0697
Severity
MEDIUM
CVSS
4.3
EPSS
2.57%
Original Filing — NVD Description
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.