| Package | Affected versions | Patched versions |
|---|---|---|
| mezzanine | = 4.3.1 |
Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free