← All advisories

Medium severity6.1NVD Advisory· Published May 5, 2025· Updated Jun 17, 2026

CVE-2025-29573

CVE-2025-29573

Description

Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
MezzaninePyPI	<= 6.0.0	—

Affected products

2

Mezzanine/Mezzanine CMScpe-rescue
ghsa-coords
pkg:pypi/mezzanine
Range: <= 6.0.0

Patches

Vulnerability mechanics

References

4

www.squadappsec.com/post/cve-2025-29573-persistent-xss-in-mezzanine-cms-6-0-0-via-malicious-filenamenvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-2544-hpcq-6g27ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-29573ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/mezzanine/PYSEC-2025-136.yamlghsaWEB

News mentions

0

No linked articles in our index yet.