CVE-2020-5224

CVE-2020-5224 is a high-severity vulnerability affecting Django User Sessions prior to version 1.7.1. It allows for session takeover if an attacker can exploit an existing Cross-Site Scripting (XSS) vulnerability to extract session keys from rendered HTML. The vulnerability has a CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability, with a low attack complexity and no user interaction required once an XSS is present. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.