MEDIUM 4.8
PYSEC-2025-137
Details
A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / mezzanine
Introduced in:
0 No fixed version published yet for mezzanine (pip). Pin to a known-safe version or switch to an alternative.