october/rain vulnerabilities (Packagist)
6 vulnerabilities.
october/rainPackagistOctober CMS has Stored XSS via SVG Filter Bypass4.8 Mediumoctober/rainPackagistOctober CMS: Environment Variable Exfiltration via INI Parser Interpolation4.9 Mediumoctober/rainPackagistOctober CMS: Twig Sandbox Bypass via Collection Methods4.9 Mediumoctober/rainPackagistOctober CMS Session ID not invalidated after logout9.8 Criticaloctober/rainPackagistReliance on Cookies without validation in OctoberCMS6.1 Mediumoctober/rainPackagistOctoberCMS Cross-Site Scripting5.4 Medium