Lucene search

K
osvGoogleOSV:CVE-2021-25978
HistoryNov 07, 2021 - 6:15 p.m.

CVE-2021-25978

2021-11-0718:15:07
Google
osv.dev
3

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%