Medium · 5.4 CVE-2023-37692 EUVD-2023-2133GHSA-r47v-rxcg-p28j

Stored Cross-Site Scripting October CMS

Published Jul 26, 2023 · Updated Oct 23, 2024 · Assigned by mitre

Description

An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file.

Ecosystem	Package	Affected	Fixed	Record
Packagist	october/october	<= 3.4.4	—	GHSA-r47v-rxcg-p28j