Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2020-19002

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-fpv7-hx6r-9vcx

Mezzanine Cross Site Scripting (XSS) vulnerability Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the `Description` field of the component `admin/blog/blogpost/add/`. This issue is different than CVE-2018-16632.

gitlab/pypi/Mezzanine/CVE-2020-19002

Mezzanine Cross Site Scripting (XSS) vulnerability Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the `Description` field of the component `admin/blog/blogpost/add/`. This issue is different than CVE-2018-16632.

pypa/mezzanine/PYSEC-2021-343

Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.

pysec/PYSEC-2021-343

Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.