CVE-2017-1000193 - October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser

Back Back to CVE browser

MEDIUM

October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser

Published Nov 17, 2017

6.1

MEDIUM

CVSS 3.0

EPSS 1.00%

Description

October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

Link	Providers	Tags
https://github.com/advisories/GHSA-3p6c-9xhm-8x7h		Advisory
https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-66d6dfe5e11488e1afefcb69b8bdaabfR31		x_refsource_MISCPatch
https://nvd.nist.gov/vuln/detail/CVE-2017-1000193