PT-2024-21057

Name of the Vulnerable Software and Affected Versions October versions prior to 3.5.15 Description The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this issue cannot be exploited through normal...