Listen to this Post
The vulnerability is a persistent cross-site scripting (XSS) flaw in the October CMS backend configuration forms, specifically in the “Branding and Appearance Styles” section. Users with the “Customize Backend Styles” permission can input stylesheet code via Settings → Branding & Appearance → Styles. Normally, this input is intended for CSS within