emirhanyucelll/tendenci

Releases0

Cross Site Scripting (XSS)

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-70959 ↗	Feb 2, 2026Monday, 2 February 2026, 23:16	5.4 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
CVE-2025-70960 ↗	Feb 2, 2026Monday, 2 February 2026, 23:16	5.4 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.