← CVE Intelligence

CVE-2021-25978

Apostrophe - XSS PUBLISHED

Description (CNA)

Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed.

Affected (CNA)

Vendor / productVersions
Apostrophe / Apostrophe affected unspecified through 3.3.1; affected 2.63.0 before unspecified

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.