~ / search / GHSA-gcgj-qh8p-57hm

GHSA-gcgj-qh8p-57hm

October CMS Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-25365

Packages

EcosystemPackageAffectedFixed in
Packagist october/october <= 3.2.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3

References

External links from the advisory. They lead to third-party sites.