Lucene search
Veracode Vulnerability DatabaseVERACODE:5450HistoryNov 17, 2017 - 9:52 a.m.
Cross-site Scripting (XSS)
2017-11-1709:52:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
31.8%
October CMS is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the brand logo image name, allowing a malicious user to inject and execute arbitrary Javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| october/october | le | 1.0.412 |
Related
cve
cve
CVE-2017-1000193
2022-10-03 16:23:10
github
github
October CMS XSS
2022-05-13 01:24:44
osv
osv
CVE-2017-1000193
2017-11-17 02:29:00
October CMS XSS
2022-05-13 01:24:44
cvelist
cvelist
CVE-2017-1000193
2022-10-03 16:23:10
prion
prion
Cross site scripting
2017-11-17 02:29:00
nvd
nvd
CVE-2017-1000193
2017-11-17 02:29:00