EIP-2026-110016

PRE-CVE

October CMS v3.4.4 - Stored Cross-Site Scripting (XSS) (Authenticated)

Title source: legacy

Description

October CMS v3.4.4 - Stored Cross-Site Scripting (XSS) (Authenticated)

Exploits (1)

exploitdb WORKING POC
by Okan Kurtulus · textwebappsphp
https://www.exploit-db.com/exploits/51630

Details

Status pre_cve
Tracked Since Feb 18, 2026