Security Advisory

CVE-2026-27937

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-21 16:17:06

Last updated 2026-04-21 20:37:33

Assigner GitHub_M

State PUBLISHED

Description

October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, a reflected Cross-Site Scripting (XSS) vulnerability was identified in the backend DataTable widget where a query parameter was rendered without proper output escaping. This vulnerability is fixed in 3.7.16 and 4.1.16.

← Browse all CVEs View on cve.org ↗