Description
A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tendenci | <= 16.14 | — | GHSA-6fvp-wmh6-jg95 |
| PyPI | tendenci | <= 15.3.7 | — | PYSEC-2026-138 |