Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Jupo Subscribe
Filtered by product Mezzanine
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-19002 1 Jupo 1 Mezzanine 2021-08-31 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.
CVE-2018-16632 1 Jupo 1 Mezzanine 2019-02-26 3.5 LOW 4.8 MEDIUM
Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/.