Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920) /r/netsec - Information Security News & Discussion By: /u/Sandwich_1337 5 August 2026 at 14:38 submitted by /u/Sandwich_1337 [link] [comments]