october/backend vulnerabilities (Packagist)
7 vulnerabilities.
october/backendPackagistOctober CMS vulnerable to Potential Host Header Poisoning on misconfigured servers6.8 Mediumoctober/backendPackagistStored XSS by authenticated backend user with access to upload files2.8 Lowoctober/backendPackagistPrivilege escalation by backend users assigned to the default "Publisher" system role4.0 Mediumoctober/backendPackagistStored XSS in October3.5 Lowoctober/backendPackagistCross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites3.7 Lowoctober/backendPackagistPotential CSV Injection vector in OctoberCMS4.0 Mediumoctober/backendPackagistReflected XSS when importing CSV in OctoberCMS4.0 Medium