Lucene search
GoogleOSV:GHSA-4R9C-JGHC-CX5MHistoryNov 10, 2021 - 4:45 p.m.
Cross-site Scripting in apostrophe
2021-11-1016:45:34
Google
osv.dev
7
0.001 Low
EPSS
Percentile
22.7%
Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apostrophe | lt | 3.4.0 | |
| apostrophe | ge | 2.63.0 |
Related
prion
prion
Cross site scripting
2021-11-07 18:15:00
nvd
nvd
CVE-2021-25978
2021-11-07 18:15:07
cvelist
cvelist
CVE-2021-25978 Apostrophe - XSS
2021-11-07 17:15:10
cnvd
cnvd
Apostrophe CMS Cross-Site Scripting Vulnerability
2021-11-09 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2021-11-08 04:40:40
cve
cve
CVE-2021-25978
2021-11-07 18:15:07
osv
osv
CVE-2021-25978
2021-11-07 18:15:07
github
github
Cross-site Scripting in apostrophe
2021-11-10 16:45:34