Lucene search
+L

7 matches found

OSV
OSV
added 2025/05/05 9:31 p.m.5 views

GHSA-2544-HPCQ-6G27 Mezzanine CMS Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module...

6.1CVSS5.9AI score0.00278EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2025/05/05 9:31 p.m.19 views

Mezzanine CMS Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module...

6.1CVSS5.7AI score0.00278EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2025/05/05 7:15 p.m.13 views

PYSEC-2025-136

Cross-Site Scripting XSS vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2025/05/05 7:15 p.m.9 views

PYSEC-2025-136

Cross-Site Scripting XSS vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.6 views

mezzanine 安全漏洞

mezzanine is a Django CMS framework by stephenmcd individual developer. A security vulnerability exists in mezzanine version 6.0.0, which originates from cross-site scripting in the View Entries feature of the Forms module...

6.1CVSS6AI score0.00278EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.11 views

PT-2025-19774 · Unknown · Mezzanine Cms

Name of the Vulnerable Software and Affected Versions: Mezzanine CMS version 6.0.0 Description: A Cross-Site Scripting XSS issue exists in the "View Entries" feature within the Forms module. This allows for potential malicious script execution. Recommendations: For Mezzanine CMS version 6.0.0,...

6.1CVSS5.6AI score0.00278EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2021/08/03 9:15 p.m.4 views

CVE-2021-33334

The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 6, does not properly check user permissions, which allows remote attackers with the forms "Access in Site Administration" permission to vi...

4.3CVSS6AI score0.00861EPSS
SaveExploits0References3
Rows per page
Query Builder