October CMS version 3.4.0 suffers from a persistent cross site scripting vulnerability when a user has blog-creating capabilities. Continue reading...