Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-25978

Apostrophe - XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mend

Description

Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apostrophe Apostrophe

  • unspecified to ≤ 3.3.1affected
  • 2.63.0 to < unspecifiedaffected

References