Description
October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, a reflected Cross-Site Scripting (XSS) vulnerability was identified in the backend DataTable widget where a query parameter was rendered without proper output escaping. This vulnerability is fixed in 3.7.16 and 4.1.16.
CVSS 3.1EPSS 0.14400000000000002%Risque 0.31
Voir la source- Publication
- 2026-04-21 17:16:35
- Versions concernées
- <3.7.16, <4.1.16
- Type
- Installed app
- Vecteur
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N