[MEDIUM] October CMS has Stored XSS in Event Log Mail Preview

PKSA-57nm-kh7g-ddrg CVE-2026-24907 GHSA-j4j5-9x6g-rgxc

Affected package: october/system

Affected version: <=3.7.13|>=4.0.0,<=4.1.9

Reported by:
GitHub