Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-44383
HistoryNov 29, 2023 - 8:15 p.m.

Cross site scripting

2023-11-2920:15:00
PRIOn knowledge base
www.prio-n.com
2
october cms
cross site scripting
stored xss
svg files
patched vulnerability
version 3.5.2

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

October is a Content Management System (CMS) and web platform to assist with development workflow. A user with access to the media manager that stores SVG files could create a stored XSS attack against themselves and any other user with access to the media manager when SVG files are supported. This issue has been patched in version 3.5.2.

CPENameOperatorVersion
octoberge3.0.0
octoberlt3.5.2

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Related for PRION:CVE-2023-44383