13 matches found
ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
Summary ApostropheCMS widget styles support project-defined schema fields. If a project defines a free-form string style field with a CSS property and no selector, an editor-controlled value is rendered as an inline CSS declaration. The resulting declaration is then inserted into the widget...
EUVD-2026-105171
ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization...
GHSA-7JG5-FRGC-C67W ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
Summary ApostropheCMS widget styles support project-defined schema fields. If a project defines a free-form string style field with a CSS property and no selector, an editor-controlled value is rendered as an inline CSS declaration. The resulting declaration is then inserted into the widget...
npm: ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
npm: ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization vulnerability discovered by ? in WordPress npm apostrophe versions 4.34.0...
CVE-2026-112958 ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style field can carry an editor-controlled quote into an inline style attribute because the wrapper serializer does not apply HTML-attribute encoding. The quote can terminate the...
CVE-2026-112958
The ApostropheCMS Node.js content management system is vulnerable to Stored XSS in versions prior to 4.34.0 . The root cause is a lack of HTML-attribute encoding within the wrapper serializer for project-defined free-form widget style fields. An editor can inject an unescaped quote into an inline...
CVE-2026-112958 ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style field can carry an editor-controlled quote into an inline style attribute because the wrapper serializer does not apply HTML-attribute encoding. The quote can terminate the...
CVE-2026-112958 ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style field can carry an editor-controlled quote into an inline style attribute because the wrapper serializer does not apply HTML-attribute encoding. The quote can terminate the...
PT-2026-118490
Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 4.34.0 Description A project-defined free-form widget style field allows an editor-controlled quote to be inserted into an inline style attribute because the wrapper serializer fails to apply HTML-attribute...
[SECURITY] Fedora 44 Update: plasma-oxygen-6.6.4-1.fc44
Plasma and Qt widget style and window decorations for Plasma...
Cross-site Scripting (XSS)
Overview apostrophe is a content management system CMS for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerabl...
CVE-2026-33889 ApostropheCMS: Stored XSS via CSS Custom Property Injection in `@apostrophecms/color-field` Escaping Style Tag Context
ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain a stored cross-site scripting vulnerability in the @apostrophecms/color-field module, where color values prefixed with -- bypass TinyColor validation intended for CSS custom properties, and the...