Lucene search
PRIOn knowledge basePRION:CVE-2021-25978HistoryNov 07, 2021 - 6:15 p.m.
Cross site scripting
2021-11-0718:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
22.7%
Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apostrophecms | ge | 2.63.0 | |
| apostrophecms | le | 3.3.1 |
Related
osv
osv
Cross-site Scripting in apostrophe
2021-11-10 16:45:34
CVE-2021-25978
2021-11-07 18:15:07
nvd
nvd
CVE-2021-25978
2021-11-07 18:15:07
cvelist
cvelist
CVE-2021-25978 Apostrophe - XSS
2021-11-07 17:15:10
cnvd
cnvd
Apostrophe CMS Cross-Site Scripting Vulnerability
2021-11-09 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2021-11-08 04:40:40
cve
cve
CVE-2021-25978
2021-11-07 18:15:07
github
github
Cross-site Scripting in apostrophe
2021-11-10 16:45:34