{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"liangliangyy/DjangoBlog","product":"DjangoBlog","source":"CNA: VulnCheck","vendor":"liangliangyy","versions":[{"lessThanOrEqual":"6134ed63079de676b271af31de4dd40264d17c52","status":"affected","version":"d186b1c53bac400a0c8a840f62a121d59880fe97","versionType":"git"}]}],"cveId":"CVE-2026-129156","cwes":["CWE-79"],"description":"DjangoBlog commit d186b1c through commit 6134ed6 contains a stored cross-site scripting vulnerability that allows authenticated OAuth users to inject script via an unescaped nickname in comment reactions. Attackers can set their OAuth display name to a payload closing the single-quoted data-reactions attribute, then react to a comment to execute script in article visitors' browsers.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.1,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","version":"4.0"},{"score":5.4,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},{"score":5.1,"severity":"medium","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"},{"score":5.4,"severity":"medium","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794608244403,"publishedAt":1794590522375,"references":[{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vul.yulun.ac.cn/20261101/djangoblog/"},{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://github.com/liangliangyy/DjangoBlog/issues/1030"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/liangliangyy/DjangoBlog/blob/6134ed63079de676b271af31de4dd40264d17c52/oauth/views.py#L102-L112"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/liangliangyy/DjangoBlog/blob/6134ed63079de676b271af31de4dd40264d17c52/templates/comments/tags/comment_item_modern.html#L76"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/liangliangyy/DjangoBlog/blob/6134ed63079de676b271af31de4dd40264d17c52/blog/templatetags/blog_tags.py#L162-L164"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/djangoblog-commit-d186b1c-through-6134ed6-stored-xss-via-comment-reactions"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/liangliangyy/DjangoBlog/blob/6134ed63079de676b271af31de4dd40264d17c52/blog/templatetags/blog_tags.py#L162-L164"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/liangliangyy/DjangoBlog/blob/6134ed63079de676b271af31de4dd40264d17c52/oauth/views.py#L102-L112"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/liangliangyy/DjangoBlog/blob/6134ed63079de676b271af31de4dd40264d17c52/templates/comments/tags/comment_item_modern.html#L76"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/liangliangyy/DjangoBlog/issues/1030"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://vul.yulun.ac.cn/20261101/djangoblog/"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://www.vulncheck.com/advisories/djangoblog-commit-d186b1c-through-6134ed6-stored-xss-via-comment-reactions"}],"remediation":[],"revision":"4e5d9bf3c887382dff0116545886730709e81511ec6fe17b9296defdd49d2e43","sources":[{"modifiedAt":1794604486139,"name":"CNA: VulnCheck","retrievedAt":1794607784882,"url":"https://www.cve.org/CVERecord?id=CVE-2026-129156"},{"modifiedAt":1794608244403,"name":"NVD","retrievedAt":1794615578876,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-129156"}],"ssvc":{"assessedAt":1794604478744,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"DjangoBlog commit d186b1c through 6134ed6 Stored XSS via Comment Reactions","updatedAt":1794615578876}