AIKIDO-2025-10058
django-autocomplete-light is vulnerable to Cross-site Scripting (XSS)
42
Medium Risk
This Affects:
django-autocomplete-lightTL;DR
Affected versions of the package are vulnerable to Cross-site Scripting (XSS) in select2.js when displaying selected item. This allows attackers to inject malicious scripts into web pages viewed by other users. This could lead to the execution of arbitrary code in the context of a user's browser, potentially compromising sensitive data or user sessions.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
django-autocomplete-light is vulnerable to Cross-site Scripting (XSS) in versions 3.1.7 - 3.11.0.
How to fix this
Upgrade the django-autocomplete-light library to the patch version.
Get Secure Now
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant