VULNERABILITY INTELLIGENCE

CVE-2020-19002

CVSS score6.1 MEDIUM

EPSS probability0.62%

CISA KEVNot currently listed

Published2021-08-27

Last modified2026-06-17

Description

Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.