~ / search / GHSA-3p6c-9xhm-8x7h

GHSA-3p6c-9xhm-8x7h

October CMS XSS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-1000193

Packages

EcosystemPackageAffectedFixed in
Packagist october/october < 1.0.413 1.0.413

Details

As written in the advisory (Markdown source, shown as plain text).

October CMS build 412 is vulnerable to stored XSS in brand logo image name resulting in JavaScript code execution in the victim's browser.

References

External links from the advisory. They lead to third-party sites.