Skip to content
OpenAdvisories

Package · PyPI

mezzanine

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 4.8
    CVE-2025-50481 Public exploit

    Mezzanine CMS vulnerable to Cross-site Scripting

    A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post.

    mezzanine PyPI
  • Medium 4.8
    CVE-2025-6050

    Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface

    Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin interface. The vulnerability exists in the "displayable_links_js" function, which fails to properly sanitize blog post titles before including t…

    jupo mezzanine mezzanine PyPI
  • Medium 6.1
    CVE-2025-29573

    Mezzanine CMS Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module.

    mezzanine PyPI
  • Critical 9.8
    CVE-2024-25169 Public exploit

    Mezzanine allows attackers to bypass access control mechanisms

    An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

    mezzanine PyPI
  • Critical 9.1
    CVE-2024-25170 Public exploit

    Mezzanine allows attackers to bypass access controls via manipulating the Host header

    An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.

    mezzanine PyPI
  • Medium 6.1
    CVE-2020-19002

    Mezzanine Cross Site Scripting (XSS) vulnerability

    Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.

    mezzanine PyPI