CVE-2019-15486
MEDIUMdjango-js-reverse < 0.9.1 - Cross-Site Scripting via js_reverse_inline
Title source: llmDescription
django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline.
References (2)
Core 2
Core References
Patch, Release Notes, Third Party Advisory x_refsource_misc
https://github.com/ierror/django-js-reverse/compare/v0.9.0...v0.9.1
Third Party Advisory x_refsource_misc
https://github.com/ierror/django-js-reverse/pull/81
Scores
CVSS v3
6.1
EPSS
0.0103
EPSS Percentile
59.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
django_js_reverse_project/django_js_reserve
< 0.9.1
pypi/django-js-reverse
0 - 0.9.1PyPI
Published
Aug 23, 2019
Tracked Since
Feb 18, 2026