← Back

Django User Sessions

django-user-sessions

Vendor: Django User Sessions Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-5224
1Django User Sessions Project
1Django User Sessions
Jun 17, 2026
Jan 24, 2020
N/A· v4
8.8 HIGH· v3
4.0 MEDIUM· v2
In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessions. The session key is used to identify sessions, and thus included in the rendered HTML. In itself...Show more
In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessions. The session key is used to identify sessions, and thus included in the rendered HTML. In itself this is not a problem. However if the website has an XSS vulnerability, the session key could be extracted by the attacker and a session takeover could happen.Show less