Vulnerability CVE-2023-25365


Published: 2024-02-08

Description:
Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3

 References:
https://cupc4k3.medium.com/cve-2023-25365-xss-via-file-upload-bypass-ddf4d2a106a7

Copyright 2026, cxsecurity.com

 

Back to Top