Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114682. PoCs published by Curesec Research Team.
AI-analyzed exploit summary This is a detailed security advisory describing two persistent XSS vulnerabilities in Mezzanine CMS 4.2.0, including proof-of-concept steps for exploitation via comment author names and HTML file uploads.
Description
Mezzanine 4.2.0 - Cross-Site Scripting
Exploits (1)
exploitdb
WRITEUP
by Curesec Research Team · textwebappspython
https://www.exploit-db.com/exploits/40799
This is a detailed security advisory describing two persistent XSS vulnerabilities in Mezzanine CMS 4.2.0, including proof-of-concept steps for exploitation via comment author names and HTML file uploads.
Classification
Writeup 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
Mezzanine CMS 4.2.0
No auth needed
Prerequisites:
Access to comment functionality or file upload permissions
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026