tendenci vulnerabilities (PyPI)

5 vulnerabilities.

• tendenci PyPI Tendenci CMS contains a stored Cross-site Scripting (XSS) vulnerability in the Forums module CVE-2025-70960 5.4 MediumFebruary 2, 2026
• tendenci PyPI Tendenci CMS Contains a Cross-site Scripting Vulnerability in its Jobs Module CVE-2025-70959 5.4 MediumFebruary 2, 2026
• tendenci PyPI Tendenci 12.3.1 - CSV/ Formula Injection CVE-2020-36962 Fix available EPSS 12.5% 5.3 MediumJanuary 28, 2026
• tendenci PyPI Tendenci has Authenticated Remote Code Execution via Pickle Deserialization CVE-2026-23946 Fix available 6.8 MediumJanuary 21, 2026
• tendenci PyPI Deserialization of Untrusted Data in Tendenci CVE-2020-14942 Fix available 9.8 CriticalJune 21, 2020