CVSS 3.0
6.1 mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2017-6591
Medium (6.1) in django-epiceditor project django-epiceditor. EPSS 0.8% chance of exploitation in the next 30 days.
There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-11-01)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- django-epiceditor_project:django-epiceditor
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-xp5m-4c9f-498q | PyPI | django-epiceditor | 0.2.3 | no fix published |
| PYSEC-2017-86 | PyPI | django-epiceditor | all versions | no fix published |