tendenci has 2 CVEs on record. The median CVSS is 6.1 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 6.1
Publish → KEV: —
Last 90 days: 0 prev 0

Products

tendenci 2

Follow tendenci:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

CVE-2026-23946Medium· 6.8Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization38
CVE-2025-70960Medium· 5.4A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web …30

tendenci vulnerabilities

CVEs affecting tendenci, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2025-70960Medium· 5.4

7mo ago

A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web …

A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.

▾ Sunlittendenci · tendenciEPSS 0.25%via OSV

CVE-2026-23946Medium· 6.8

8mo ago

Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization

▾ Sunlittendenci · tendenciEPSS 0.85%via OSV