Security Advisory
CVE-2017-1000193
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victims browser.