CVE-2018-16632: Jupo Mezzanine

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/.

Affected products

• Jupo Mezzanine: version 4.3.1 only

Published 2018-12-28. Last modified 2026-06-17.