CVE-2017-1000193

Published November 17th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.

octobercms/october

Self-hosted CMS platform based on the Laravel PHP Framework.

GitHub

11.1K