5.3
Medium
CVE-2026-45014 ApostropheCMS is an open-source Node.js content management system
Description
ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 are vulnerable to stored cross-site scripting via unsanitized user display name in draft version tooltip. As of time of publication, no known patched versions are available.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| apostrophe 4.29 | earliest → 4.29.0 | No fix stated |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of apostrophe
The 51 CVEs of apostrophe →
CVE-2026-113711
ApostropheCMS is an open-source Node.js content management system
7.5
High
CVE-2026-113710
ApostropheCMS is an open-source Node.js content management system
5.9
Medium
CVE-2026-113671
ApostropheCMS is an open-source Node.js content management system
4.3
Medium
CVE-2026-113670
ApostropheCMS is an open-source Node.js content management system
5.3
Medium