CVE-2026-113659 | ApostropheCMS up to 4.32.x Query Parser apos.http.parseQuery cross site scripting

October 20, 2026 Yanac

A vulnerability categorized as problematic has been discovered in ApostropheCMS up to 4.32.x. The affected element is the function apos.http.parseQuery of the component Query Parser. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-113659. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More