CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

CVE-2023-43876 is a reflected XSS vulnerability affecting October CMS installer, version 3.4.16, where an attacker can inject a crafted payload into the dbhost field to execute arbitrary web scripts. Multiple sources (NVD, Red Hat, CNNVD, OSV, PRION, PT-Security, etc.) corroborate the same vector...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...