Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/mezzanine@6.0.1
purl pkg:pypi/mezzanine@6.0.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 8.6
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
PYSEC-2025-137
Aliases:
CVE-2025-50481
GHSA-269j-37ww-cmh3
A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts … There are no reported fixed by versions.
PYSEC-2021-343
Aliases:
CVE-2020-19002
GHSA-fpv7-hx6r-9vcx
Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the … There are no reported fixed by versions.
PYSEC-2025-236
Aliases:
CVE-2025-6050
GHSA-7pr5-w74r-jjj7
Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface. The vulnerability …
6.1.1
Vulnerable
6.1.1
Vulnerable
This package is not known to fix any advisories.