Stored Cross-Site Scripting October CMS

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-37692 · ADVISORY
• octobercms/october · PACKAGE
• okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticated · WEB
• okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticated · Exploit

Mais vulnerabilidades de october/october

• CVE-2026-100909ALTO 7.3A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file m…
• CVE-2026-26274MÉDIO 6.6October is a Content Management System (CMS) and web platform. Prior to 3.7.14 and 4.1.10, a vulnerability was identified in the Twig sandbo…
• CVE-2024-51991MÉDIO 4.9October is a Content Management System (CMS) and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrato…
• CVE-2024-45962MÉDIO 4.7October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system. If the fil…
• CVE-2023-25365ALTO 7.8Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3