It was discovered that Django is prone to a cross-site scripting vulnerability in the admin's add/change related popup (CVE-2016-6186).
{ "section": "core" }