Two cross-site scripting vulnerabilities were discovered in the Django Rest Framework, a toolkit to build web APIs.