CVE-2023-25365

Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3...

CVE-2023-25365

Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3...

CVE-2023-25365

October CMS 3.2.0 is affected by a Cross Site Scripting (XSS) vulnerability that can permit a local attacker to execute arbitrary code via the .mp3 file type. The issue appears to reside in file handling/upload logic, enabling code execution through specially crafted MP3 uploads. Public reference...

CVE-2023-25365

Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3...