-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stems from: 1) GitHub issue #1921 explicitly mentions description_from_content in core/models.py line 184 as the root cause 2) The template blog/blog_post_list.html line 112 uses {{ blog_post.description_from_content|safe }} which renders unsanitized content 3) The XSS triggers when user-controlled Title field content (containing SVG payload) flows through description_from_content to the template without proper escaping. The method's output is marked as safe HTML despite containing untrusted input.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Mezzanine | pip | <= 6.0.0 |
KEV Misses 88% of Exploited CVEs- Get the report