Mezzanine CMS vulnerable to Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-50481 · ADVISORY
• kevinpdicks/Mezzanine-CMS-6.1.0-XSS · WEB
• pypa/advisory-database · WEB
• stephenmcd/mezzanine · PACKAGE
• GitHub Advisory GHSA-269j-37ww-cmh3 · ADVISORY

Lỗ hổng khác của mezzanine

• CVE-2025-6050TRUNG BÌNH 4.8Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface. The vulnerabil…
• CVE-2025-29573TRUNG BÌNH 6.1Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module.
• CVE-2024-25170NGHIÊM TRỌNG 9.1An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.
• CVE-2024-25169NGHIÊM TRỌNG 9.8An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.
• CVE-2020-19002TRUNG BÌNH 6.1Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the componen…