CVE-2026-35569 | apostrophe up to 4.28.x Meta Description cross site scripting (GHSA-855c-r2vq-c292)

A vulnerability, which was classified as problematic, has been found in apostrophe up to 4.28.x. Affected by this vulnerability is an unknown functionality of the component Meta Description Handler. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2026-35569. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.