Octobercms: >> October Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612.
CVSS Score
5.4
EPSS Score
0.002
Published
2017-09-28
Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.
CVSS Score
4.3
EPSS Score
0.003
Published
2015-09-04
Page 6