VulnSea

tendenci has 3 CVEs on record. The median CVSS is 6.8 (medium), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
6.8
Publish → KEV
—
Last 90 days
0 prev 0

Weakness classes

Products

  • tendenci 3
Follow tendenci:RSS feedSave a search →Embed badge ↗
3
Total CVEs
1
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

tendenci vulnerabilities

CVEs affecting tendenci, newest first. Open any entry for full detail, references, and exploit status.

3 CVEsRSS

CVE-2025-70960Medium· 5.4
9mo ago

A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web …

A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.

▾ Sunlittendenci · tendenciEPSS 0.27%via OSV
CVE-2020-36962Critical· 9.8PoC
9mo ago

Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export

Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in t…

▾ Abyssaltendenci · tendenciEPSS 12%via NVD
CVE-2026-23946Medium· 6.8
9mo ago

Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization

Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization

▾ Sunlittendenci · tendenciEPSS 0.84%via OSV
tendenci vulnerabilities (CVEs) · VulnSea