EDB-44144

PoC

October CMS < 1.0.431 - Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Samrat Daspublished 2018-02-19catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-7198US	medium6.1	2.35% (84th)	Exploit	2018-02-18
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.