Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-25978
5.4
MEDIUMCVSS v3
Severity scale
010
Description
Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.
apostrophecms/apostrophe
GitHubA full-featured, open-source content management framework built with Node.js that empowers organizations by combining in-context editing and headless architecture in a full-stack JS environment.
GitHubA full-featured, open-source content management framework built with Node.js that empowers organizations by combining in-context editing and headless architecture in a full-stack JS environment.NVD