CVE-2017-1000193
October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.
Published: 2017-11-17 · CVSS: Unscored
October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7