writeups.xyz / CVE-2023-25365 / XSS via file upload bypass

Submitter : c2a

Date: 8 February 2024

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Unrestricted File Upload

Programs :

• October CMS

Authors :

• Cupc4k3
• Gabriel v. Mendes

Link :
https://cupc4k3.medium.com/cve-2023-25365-xss-via-file-upload-bypass-ddf4d2a106a7