october/system vulnerabilities (Packagist)
25 vulnerabilities.
october/systemPackagistOctober CMS: PHP Object Injection via Backend Widget Session Storage3.3 Lowoctober/systemPackagistOctober CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls3.3 Lowoctober/systemPackagistOctober: Editor Sub-Permission Bypass for Asset and Blueprint File Operations3.3 Lowoctober/systemPackagistOctober: Reflected XSS via DataTable Form Widget3.1 Lowoctober/systemPackagistOctober: Safe Mode Bypass via CSS Preprocessor Compilers4.9 Mediumoctober/systemPackagistOctober CMS has Stored XSS via Event Log Mail Preview5.1 Mediumoctober/systemPackagistOctober CMS has Stored XSS in its Backend Editor Markup Classes5.1 Mediumoctober/systemPackagistOctober CMS Vulnerable to Stored XSS via Branding Styles6.1 Mediumoctober/systemPackagistOctober CMS Vulnerable to Stored XSS via Editor and Branding Styles6.1 Mediumoctober/systemPackagistOctober CMS Allows Unprotected SVG Rename in Media Manager1.1 Lowoctober/systemPackagistReflected XSS via X-October-Request-Handler Header3.1 Lowoctober/systemPackagistOctober Open Redirect for Administrator Accounts3.5 Lowoctober/systemPackagistOctober CMS safe mode bypass using Twig sandbox escape9.1 Criticaloctober/systemPackagistOctober CMS safe mode bypass using Page template injection4.9 Mediumoctober/systemPackagistOctober CMS stored XSS by authenticated backend user with improper configuration5.4 Mediumoctober/systemPackagistOctober CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution)6.2 Mediumoctober/systemPackagistRace Condition in October CMS upload process8.1 Highoctober/systemPackagistMissing server signature validation in OctoberCMS4.8 Mediumoctober/systemPackagistAuthenticated remote code execution in octobercms7.2 Highoctober/systemPackagistAuthenticated file write leads to remote code execution in october/system8.8 Highoctober/systemPackagistArbitrary code execution in october/system8.8 Highoctober/systemPackagistDeleted Admin Can Sign In to Admin Interface7.2 Highoctober/systemPackagistAuthentication bypass in Octobercms7.4 Highoctober/systemPackagistAccount Takeover in Octobercms8.2 Highoctober/systemPackagistUse of insecure jQuery version in OctoberCMSNo score