Mezzanine-CMS-6.1.0-XSS

Mezzanine-CMS-6.1.0-XSS CVE-2025-50481 Описание Уязвимость межсайтового скриптинга XSS в компоненте /blog/blogpost/add в Mezzanine CMS v6.1.0 позволяет злоумышленникам выполнять произвольные веб-сценарии или HTML-код путём внедрения специально сформированной полезной нагрузки в запись блога. CVE:...

CVE-2024-25170-Mezzanine-v6.0.0

Продукт: Mezzanine CMS Версия: v6.0.0 Дата обнаружения: 10.01.2024. Дата сообщения: 10.01.2024. Тип уязвимости: Incorrect Access Control. CVE ID: CVE-2024-25170 Описание: Проблема в Mezzanine v6.0.0 позволяет злоумышленникам обходить контроль доступа путем манипуляции Host Header. POC будет скоро...

CVE-2024-25169-Mezzanine-v6.0.0

Prodotto: Mezzanine CMS Versione: v6.0.0 Data di scoperta: 10.01.2024. Data di segnalazione: 10.01.2024. Tipo di vulnerabilità: Controllo degli accessi non corretto. ID CVE: CVE-2024-25169 Descrizione: Un problema in Mezzanine v6.0.0 consente agli attaccanti di aggirare i meccanismi di controllo...

PYSEC-2026-1626 Mezzanine allows attackers to bypass access controls via manipulating the Host header

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

PYSEC-2026-1627 Mezzanine allows attackers to bypass access control mechanisms

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

EUVD-2021-0134

Malware in sbrugna...

EUVD-2018-8437

Malware in sbrugna...

EUVD-2025-18488

Malicious code in bioql PyPI...

EUVD-2025-22459

Malicious code in bioql PyPI...

EUVD-2025-13438

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Mezzanine CMS is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input sanitization due to failure to filter user-supplied input in the /blog/blogpost/add component, allowing injection of malicious scripts into blog posts...

📄 Mezzanine CMS 6.1.0 Cross Site Scripting

Mezzanine CMS version 6.10 suffers from a persistent cross site scripting vulnerability. Exploit Title: Mezzanine CMS 6.1.0 Stored Cross Site Scripting XSS via component /blog/blogpost/add Date: 23/07/2025 Exploit Author: Kevin Dicks Vendor Homepage: https://github.com/stephenmcd/mezzanine Softwa...

Mezzanine CMS 6.1.0 - Stored Cross Site Scripting (XSS)

Exploit Title: Mezzanine CMS 6.1.0 Stored Cross Site Scripting XSS via component /blog/blogpost/add Date: 23/07/2025 Exploit Author: Kevin Dicks Vendor Homepage: https://github.com/stephenmcd/mezzanine Software Link: https://github.com/stephenmcd/mezzanine Version: 6.1.0 Category: Web Application...

CVE-2025-50481

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

Mezzanine CMS vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

GHSA-269J-37WW-CMH3 Mezzanine CMS vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

CVE-2025-50481

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

PYSEC-2025-137

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

PYSEC-2025-137

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

CVE-2025-50481

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...