Django admin app XSS security fix released.
djangoproject.com