AP
Product
ApostropheCMS
10
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 6Low 1
Watch
Add ApostropheCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-35569 | 8.7 | Apr 15 | ApostropheCMS: Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMS Affected: before 4.29.0 |
| CVE-2026-32730 | 8.1 | Mar 18 | ApostropheCMS MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token Middleware Affected: before 4.28.0 |
Showing 2