CVE-2023-25365: October CMS October

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3

Affected products

• October CMS October: version 3.2.0 only

Published 2024-02-08. Last modified 2026-06-17.