A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS | Exploit Third Party Advisory |
| https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS | Exploit Third Party Advisory |
| https://github.com/stephenmcd/mezzanine | Product |
Configurations
History
28 Jul 2025, 16:59
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:jupo:mezzanine:6.1.0:*:*:*:*:*:*:* | |
| First Time |
Jupo mezzanine
Jupo |
|
| References | () https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS - Exploit, Third Party Advisory | |
| References | () https://github.com/stephenmcd/mezzanine - Product |
23 Jul 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-23 16:15
Updated : 2025-07-28 16:59
NVD link : CVE-2025-50481
Mitre link : CVE-2025-50481
JSON object : View
Products Affected
jupo
- mezzanine
CWE
No CWE.