Cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*

Authenticated backend users can perform stored cross-site scripting (XSS) by injecting malicious content into custom CSS settings in Winter CMS and October CMS.