CVE record · 1 source
CVE-2026-113650
CVSS 5.3ApostropheCMS is an open-source Node.js content management system.
- Vendor
- Node.js
- Product
- Node.js
- CVSS
- 5.3
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ApostropheCMS is an open-source Node.js content management system.
ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an <iframe> is not allowed and disallowedTagsMode is 'discard' (the defaults), its raw-text content is re-sanitized by a recursive…