Vulnerabilidades en apostrophecms
56 resultadosCVE-2026-112958MEDIUMApostropheCMS: Stored XSS via Unescaped Widget Style Attribute SerializationEPSS 0.3%CVE-2026-110904MEDIUMApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 cEPSS 0.3%CVE-2026-113662MEDIUMApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified documentEPSS 0.3%CVE-2026-84371MEDIUMApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypassEPSS 0.3%CVE-2026-113649MEDIUMApostropheCMS: Import API bypasses publication roles for protected contentEPSS 0.3%CVE-2026-35569HIGHApostropheCMS: Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMSEPSS 0.3%CVE-2026-45014MEDIUMApostrophe Vulnerable to Stored Cross-Site Scripting via Unsanitized User Display Name in Draft Version TooltipEPSS 0.3%CVE-2026-113652MEDIUMApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)EPSS 0.3%CVE-2026-53607LOW@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host headerEPSS 0.3%CVE-2026-45011HIGHApostrophe has stored XSS via javascript: URL in Image Widget LinkEPSS 0.3%CVE-2026-113661MEDIUMApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLsEPSS 0.3%CVE-2026-53608HIGH@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script TagEPSS 0.3%CVE-2026-40186MEDIUMApostropheCMS: sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags ElementsEPSS 0.2%CVE-2026-45012HIGHApostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widgetEPSS 0.2%CVE-2026-33889MEDIUMApostropheCMS: Stored XSS via CSS Custom Property Injection in `@apostrophecms/color-field` Escaping Style Tag ContextEPSS 0.2%CVE-2026-53606MEDIUMsanitize-html has an incomplete URI scheme validation that allows javascript: URIs through action, formaction, data, poster, and background attributesEPSS 0.2%