6 matches found
CVE-2020-19002
Cross Site Scripting XSS in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632...
CVE-2020-19002
Cross Site Scripting XSS in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632...
CVE-2020-19002
Cross Site Scripting XSS in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632...
CVE-2020-19002: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632...
PT-2021-10270
Name of the Vulnerable Software and Affected Versions: Mezzanine version 4.3.1 Description: The issue allows remote attackers to execute arbitrary code via the Description field of the component admin/blog/blogpost/add/. Recommendations: For Mezzanine version 4.3.1, as a temporary workaround,...
CVE-2018-16632: Improper Neutralization of Input During Web Page Generation
Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?tofield=id&popup=1 title parameter at admin/blog/blogpost/add/...