gitlab/packagist/october/october/CVE-2017-1000193
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.