2 matches found
EUVD-2026-22660
October CMS has Stored XSS in Event Log Mail Preview...
5.1CVSS5.8AI score0.00198EPSS
SaveExploits0References2
CVE-2026-24907
CVE-2026-24907 affects October CMS: versions prior to 3.7.14 and 4.1.10 contain a stored XSS in the Event Log mail preview feature. HTML is rendered in an iframe without proper sandboxing when viewing logged mail messages, allowing JavaScript execution in the viewer’s browser context. The issue i...
5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1Affected Software1
20