CVE-2017-1000193: October CMS October

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.

Affected products

• October CMS October: up to and including 1.0.412

Published 2017-11-17. Last modified 2026-06-17.