CVE-2021-42134

Description

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

Affected Platforms

Weakness Type

CWE-79

References

• https://github.com/adamghill/django-unicorn/commit/3a832a9e3f6455ddd3b87f6462472…
• https://github.com/adamghill/django-unicorn/compare/0.36.0...0.36.1
• https://github.com/adamghill/django-unicorn/commit/3a832a9e3f6455ddd3b87f6462472…
• https://github.com/adamghill/django-unicorn/compare/0.36.0...0.36.1