Skip to content
OpenAdvisories

Package · PyPI

mezzanine

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-50481 Public exploit

    Mezzanine CMS vulnerable to Cross-site Scripting

    A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post.

    mezzanine PyPI
  • Critical 9.8
    CVE-2024-25169 Public exploit

    Mezzanine allows attackers to bypass access control mechanisms

    An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

    mezzanine PyPI
  • Critical 9.1
    CVE-2024-25170 Public exploit

    Mezzanine allows attackers to bypass access controls via manipulating the Host header

    An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.

    mezzanine PyPI