All products

tendenci

PyPI · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Tendenci CMS contains a stored Cross-site Scripting (XSS) vulnerability in the Forums moduleCVE-2025-70960 · GHSA-6FVP-WMH6-JG95Version ranges need review. tendenci PyPI Medium No fix reported
Tendenci Affected by Authenticated Remote Code Execution via Pickle DeserializationCVE-2026-23946 · GHSA-339M-4QW5-J2G3Version ranges need review. tendenci PyPI Medium Fix reported
Tendenci is Vulnerable to CSV Formula Injection through its Contact Form Message Field CVE-2020-36962 · GHSA-4Q3W-JGFX-4792Version ranges need review. tendenci PyPI Medium Fix reported
Tendenci CMS Contains a Cross-site Scripting Vulnerability in its Jobs ModuleCVE-2025-70959 · GHSA-G7HJ-29XQ-R64WVersion ranges need review. tendenci PyPI Medium No fix reported
Deserialization of Untrusted Data in TendenciCVE-2020-14942 · GHSA-JQMC-FXXP-R589Version ranges need review. tendenci PyPI Critical Fix reported