CVE-2023-37692
1 advisory.
Packagist/october/october CVE-2023-37692: medium 5.4, EPSS 0.52%
Stored Cross-Site Scripting October CMS
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.4.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r47v-rxcg-p28j
- https://nvd.nist.gov/vuln/detail/CVE-2023-37692
- https://github.com/octobercms/october
- https://okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticated
CVE-2023-37692 · published · modified · JSON