Medium severity4.8NVD Advisory· Published Jul 23, 2025· Updated Jun 17, 2026

CVE-2025-50481

Description

A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
MezzaninePyPI	<= 6.1.0	—

Affected products

Mezzanine/Mezzanine CMScpe-rescue
ghsa-coords
pkg:pypi/mezzanine
Range: <= 6.1.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-269j-37ww-cmh3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-50481ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/mezzanine/PYSEC-2025-137.yamlghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000