CVE-2017-1000193

October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser

published November 17, 2017

CVSS
—
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01003 · 62.6th percentile
Published
2017-11-17T02:00Z
EPSS history
Timeline
  • 17 NOV 02:00Z
    October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser
    cvelistv5