{"action":"Upgrade mezzanine to 6.1.1 or later.","affected":[{"fixed":"6.1.1","introduced":"0"}],"component":"mezzanine","cve_ids":["CVE-2025-6050"],"ecosystem":"PyPI","epss":0.00315,"exploited":false,"fixed_versions":["6.1.1"],"ghsa_id":"GHSA-7pr5-w74r-jjj7","id":"tcs_01M5KF6CVD9VT61MZTC16HP5AQ","modified_at":"2026-07-20T21:30:35.952363668Z","published_at":"2025-06-17T12:31:15Z","references":["https://osv.dev/vulnerability/GHSA-7pr5-w74r-jjj7","https://nvd.nist.gov/vuln/detail/CVE-2025-6050","https://github.com/stephenmcd/mezzanine/commit/898630d8df48cf3ddb8b9942f59168b93216e3f8","https://advisory.checkmarx.net/advisory/CVE-2025-6050","https://github.com/advisories/GHSA-7pr5-w74r-jjj7","https://github.com/pypa/advisory-database/tree/main/vulns/mezzanine/PYSEC-2025-236.yaml","https://github.com/stephenmcd/mezzanine","https://github.com/stephenmcd/mezzanine/discussions/2080","https://https://github.com/stephenmcd/mezzanine/commit/898630d8df48cf3ddb8b9942f59168b93216e3f8"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-7pr5-w74r-jjj7","url":"https://osv.dev/vulnerability/GHSA-7pr5-w74r-jjj7"},{"source":"nvd","source_id":"CVE-2025-6050","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6050"}],"summary":"Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function"}