django-markdownx
A comprehensive Markdown editor built for Django.
View on Github
Activity
- Latest release
- 3mo ago
- Total releases
- 62
- Cadence
- ~7 days
- Last 12 months
- 2
Reach
- Stars
- —
Details
- License
- BSD-3-Clause
- First release
- Nov 01, 2014
| Version | Released | |
|---|---|---|
4.0.11
patch
| ||
4.0.10
patch
| ||
4.0.9
patch
| ||
4.0.8
patch
| ||
4.0.7
patch
| ||
4.0.6
patch
| ||
4.0.5
patch
| ||
4.0.4
patch
| ||
4.0.3
patch
| ||
4.0.2
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
4.0.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
4.0.0
major
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
4.0.0b1
pre
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
3.0.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
3.0.0
major
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.28
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.27
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.26
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.25
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.24
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.23
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.22
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.21
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.20
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.19
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.18
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.17
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
2.0.0
major
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.8.1
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.7.2
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.7.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.7
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.6.3
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.6.2
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.6.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.6
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.5
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.4.3
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.4.2
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.4.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.4
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.3
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.2.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.2
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.1.3
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.1.2
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.1.1
minor
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.0.1
patch
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev | ||
1.0.0
major
1 CVE
CVE-2024-2319
PYSEC-2026-1299
GHSA-fvx8-79hx-x82f
Jul 07, 2026
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
5.4
/ 10
Medium
Network
Low
None
Required
Unchanged
Low
Low
None
Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.9
0.3.0
0.3.1
0.4.0
0.4.1
0.4.2
+ 42 more Show less
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.3
1.4
1.4.1
1.4.2
1.4.3
1.5
1.6
1.6.1
1.6.2
1.6.3
1.7
1.7.1
1.7.2
1.8.1
2.0.0
2.0.1
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
3.0.0
3.0.1
4.0.0
4.0.0b1
4.0.1
4.0.2
References Updated Jul 07, 2026 · Source: OSV.dev |