Lucene search

K
osvGoogleOSV:GHSA-9HQ8-V2JC-QJ4R
HistoryMay 17, 2022 - 4:08 a.m.

October CMS XSS In Caption Tag of Profile

2022-05-1704:08:19
Google
osv.dev
4

0.002 Low

EPSS

Percentile

60.3%

Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

0.002 Low

EPSS

Percentile

60.3%

Related for OSV:GHSA-9HQ8-V2JC-QJ4R