Mezzanine-CMS-6.1.0-XSS

Mezzanine-CMS-6.1.0-XSS CVE-2025-50481 Descripción Una vulnerabilidad de cross-site scripting XSS en el componente /blog/blogpost/add de Mezzanine CMS v6.1.0 permite a los atacantes ejecutar scripts web arbitrarios o HTML mediante la inyección de un payload manipulado en una entrada de blog. CVE:...

CVE-2024-25169-Mezzanine-v6.0.0

Producto: Mezzanine CMS Versión: v6.0.0 Fecha de descubrimiento: 10.01.2024. Fecha de reporte: 10.01.2024. Tipo de vulnerabilidad: Control de acceso incorrecto. ID de CVE: CVE-2024-25169 Descripción: Un problema en Mezzanine v6.0.0 permite a los atacantes eludir los mecanismos de control de acces...

CVE-2024-25170-Mezzanine-v6.0.0

Producto: Mezzanine CMS Versión: v6.0.0 Fecha de descubrimiento: 10.01.2024. Fecha de reporte: 10.01.2024. Tipo de vulnerabilidad: Control de Acceso Incorrecto. CVE ID: CVE-2024-25170 Descripción: Un problema en Mezzanine v6.0.0 permite a los atacantes eludir los controles de acceso manipulando e...

PYSEC-2026-1626 Mezzanine allows attackers to bypass access controls via manipulating the Host header

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

Mezzanine allows attackers to bypass access controls via manipulating the Host header

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

Mezzanine allows attackers to bypass access control mechanisms

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

PYSEC-2026-1627 Mezzanine allows attackers to bypass access control mechanisms

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

EUVD-2021-0134

Malware in sbrugna...

EUVD-2018-8437

Malware in sbrugna...

EUVD-2025-18488

Malicious code in bioql PyPI...

EUVD-2025-13438

Malicious code in bioql PyPI...

EUVD-2025-22459

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Mezzanine CMS is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input sanitization due to failure to filter user-supplied input in the /blog/blogpost/add component, allowing injection of malicious scripts into blog posts...

📄 Mezzanine CMS 6.1.0 Cross Site Scripting

Mezzanine CMS version 6.10 suffers from a persistent cross site scripting vulnerability. Exploit Title: Mezzanine CMS 6.1.0 Stored Cross Site Scripting XSS via component /blog/blogpost/add Date: 23/07/2025 Exploit Author: Kevin Dicks Vendor Homepage: https://github.com/stephenmcd/mezzanine Softwa...

Mezzanine CMS 6.1.0 - Stored Cross Site Scripting (XSS)

Exploit Title: Mezzanine CMS 6.1.0 Stored Cross Site Scripting XSS via component /blog/blogpost/add Date: 23/07/2025 Exploit Author: Kevin Dicks Vendor Homepage: https://github.com/stephenmcd/mezzanine Software Link: https://github.com/stephenmcd/mezzanine Version: 6.1.0 Category: Web Application...

CVE-2025-50481

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

Mezzanine CMS vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

GHSA-269J-37WW-CMH3 Mezzanine CMS vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

CVE-2025-50481

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

PYSEC-2025-137

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...