CVE-2026-15920 is a moderate stored cross-site scripting vulnerability in Django's admin interface where unsafe URLField values could be rendered as links and execute when clicked. Fixed in Django 6.0.8 and 5.2.17.
CVE-2026-15920 is a moderate stored cross-site scripting vulnerability in Django's admin interface where unsafe URLField values could be rendered as links and execute when clicked. Fixed in Django 6.0.8 and 5.2.17.