CVE-2025-29573

MEDIUM6.1EPSS 0.18%

Mezzanine CMS Cross-Site Scripting (XSS) vulnerability

發布日:2025/5/5修改日:2026/5/20

也稱為:GHSA-2544-hpcq-6g27PYSEC-2025-136

描述

Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module.

受影響套件(2)

PyPI/mezzaninefrom 0, <= 6.0.0
PyPI/mezzaninefrom 0, <= 6.0.0

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

參考連結(3)