Executive brief
Stored Cross-Site Scripting October CMS
Affected products
- Packagist october/october
Junglewise Threat Intelligence
CVE-2023-37692: Stored Cross-Site Scripting October CMS
CVE-2023-37692 · Severity: low · CVSS 3.1 · Published 2023-07-26
Technologies: october/october (Packagist). Vendors: Packagist.
Related threats
- October CMS: Incomplete Scheme Validation in Image Resizer
- October CMS incomplete URL scheme validation in image resizer
- October CMS Allows Unprotected SVG Rename in Media Manager
- October allows an admin account to upload PDF containing malicious JavaScript
- October CMS Cross-site Scripting vulnerability