CVE-2026-34231 in mixxorz slippers

요약 (영어)

Slippers is a UI component framework for Django. Prior to version 0.6.3, a Cross-Site Scripting (XSS) vulnerability exists in the {% attrs %} template tag of the slippers Django package. When a context variable containing untrusted data is passed to {% attrs %}, the value is interpolated into an HTML attribute string without escaping, allowing an attacker to break out of the attribute context and inject arbitrary HTML or JavaScript into the rendered page. This issue has been patched in version 0.6.3.

책임이 있는

GitHub_M

예약하다

2026. 03. 26.

공개

2026. 03. 31.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
354440	mixxorz slippers 크로스 사이트 스크립팅	79	정의되지 않음	공식 수정	CVE-2026-34231