{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.0.0"}],"component":"mezzanine","cve_ids":["CVE-2020-19002"],"ecosystem":"PyPI","epss":0.01128,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fpv7-hx6r-9vcx","id":"tcs_01M5KFFSCD7SN92S573QC75TPJ","modified_at":"2026-06-10T18:45:51Z","published_at":"2022-05-24T19:12:23Z","references":["https://osv.dev/vulnerability/GHSA-fpv7-hx6r-9vcx","https://nvd.nist.gov/vuln/detail/CVE-2020-19002","https://github.com/stephenmcd/mezzanine/issues/1921","https://github.com/pypa/advisory-database/tree/main/vulns/mezzanine/PYSEC-2021-343.yaml","https://github.com/stephenmcd/mezzanine","https://github.com/stephenmcd/mezzanine/blob/v6.0.0/mezzanine/blog/templates/blog/blog_post_list.html#L112"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fpv7-hx6r-9vcx","url":"https://osv.dev/vulnerability/GHSA-fpv7-hx6r-9vcx"}],"summary":"Mezzanine Cross Site Scripting (XSS) vulnerability"}