October CMS XSS

2022-05-1301:24:44

Google

osv.dev

0.001 Low

EPSS

Percentile

31.8%

JSON

October CMS build 412 is vulnerable to stored XSS in brand logo image name resulting in JavaScript code execution in the victim’s browser.

CPENameOperatorVersion
october/octobereq1.0.357
october/octobereq1.0.334
october/octobereq1.0.397
october/octobereq1.0.324
october/octobereq1.0.387
october/octobereq1.0.389
october/octobereq1.0.412
october/octobereq1.0.395
october/octobereq1.0.388
october/octobereq1.0.377

Name	Operator	Version
october/october	eq	1.0.357
october/october	eq	1.0.334
october/october	eq	1.0.397
october/october	eq	1.0.324
october/october	eq	1.0.387
october/october	eq	1.0.389
october/october	eq	1.0.412
october/october	eq	1.0.395
october/october	eq	1.0.388
october/october	eq	1.0.377