An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field.
- https://www.exploit-db.com/exploits/44546/
No PoCs found on GitHub currently.