Περιγραφή
October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, a reflected Cross-Site Scripting (XSS) vulnerability was identified in the backend DataTable widget where a query parameter was rendered without proper output escaping. This vulnerability is fixed in 3.7.16 and 4.1.16.
CVSS 3.1EPSS 0.14400000000000002%Κίνδυνος 0.31
Προβολή πηγής- Δημοσίευση
- 2026-04-21 17:16:35
- Επηρεαζόμενες εκδόσεις
- <3.7.16, <4.1.16
- Τύπος
- Installed app
- Διάνυσμα
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N