CVE-2026-112951 | ApostropheCMS up to 4.33.x Color Field color cross site scripting

October 20, 2026 Yanac

A vulnerability categorized as problematic has been discovered in ApostropheCMS up to 4.33.x. Impacted is an unknown function of the component Color Field. Executing a manipulation of the argument Color can lead to cross site scripting.

This vulnerability appears as CVE-2026-112951. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More