Search for packages
| purl | pkg:pypi/mezzanine@3.1.9 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 8.6 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-fpv7-hx6r-9vcx
Aliases: CVE-2020-19002 |
Mezzanine Cross Site Scripting (XSS) vulnerability Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code … | There are no reported fixed by versions. |
|
PYSEC-2025-137
Aliases: CVE-2025-50481 GHSA-269j-37ww-cmh3 |
A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts … | There are no reported fixed by versions. |
|
PYSEC-2021-343
Aliases: CVE-2020-19002 GHSA-fpv7-hx6r-9vcx |
Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the … | There are no reported fixed by versions. |
|
PYSEC-2025-136
Aliases: CVE-2025-29573 GHSA-2544-hpcq-6g27 |
Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module. | There are no reported fixed by versions. |
|
PYSEC-2026-1627
Aliases: CVE-2024-25169 GHSA-qp56-82vp-xqgv |
Mezzanine allows attackers to bypass access control mechanisms An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms … | There are no reported fixed by versions. |
|
PYSEC-2026-1626
Aliases: CVE-2024-25170 GHSA-22cc-w7xm-rfhx |
Mezzanine allows attackers to bypass access controls via manipulating the Host header An issue in Mezzanine v6.0.0 allows attackers to … | There are no reported fixed by versions. |
|
PYSEC-2025-236
Aliases: CVE-2025-6050 GHSA-7pr5-w74r-jjj7 |
Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface. The vulnerability … |
Vulnerable Vulnerable |