{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"16.14"}],"component":"tendenci","cve_ids":["CVE-2025-70960"],"ecosystem":"PyPI","epss":0.0027,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6fvp-wmh6-jg95","id":"tcs_01M5KF38ANC9VJMYB26MEF5WAN","modified_at":"2026-06-10T19:11:12.591828989Z","published_at":"2026-02-03T00:30:18Z","references":["https://osv.dev/vulnerability/GHSA-6fvp-wmh6-jg95","https://nvd.nist.gov/vuln/detail/CVE-2025-70960","https://github.com/emirhanyucelll/tendenci/blob/main/Readme.md","https://github.com/tendenci/tendenci"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-6fvp-wmh6-jg95","url":"https://osv.dev/vulnerability/GHSA-6fvp-wmh6-jg95"}],"summary":"Tendenci CMS contains a stored Cross-site Scripting (XSS) vulnerability in the Forums module"}