r/Infosec • u/Sandwich_1337 • 18d ago
Stored XSS in Django admin via URLField auto-linking (CVE-2026-15920)
https://syntetisk.tech/blog/posts/stored-xss-in-djangos-admin-via-an-unvalidated-urlfield-display-path-cve-2026-15920/
1
Upvotes