Skip to contentOctobercms October vulnerabilities
- octobercms octoberOctober CMS - RainLab Blog Plugin XSSCVE-2018-7198Public exploitFix available6.1 Medium
- octobercms october** DISPUTED ** October CMS through 1.0.428 does not prevent use of .htaccess in themes, which...CVE-2017-16941Disputed8.8 High
- octobercms octoberOctober CMS build 412 is vulnerable to file path modification in asset move functionality...CVE-2017-10001979.8 Critical
- octobercms octoberOctober CMS build 412 is vulnerable to PHP code execution in the asset manager functionality...CVE-2017-10001969.8 Critical
- octobercms octoberOctober CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting...CVE-2017-10001957.5 High
- octobercms octoberOctober CMS File Upload VulnerabilityCVE-2017-1000194Fix available9.8 Critical
- octobercms octoberOctober CMS XSSCVE-2017-1000193Fix available6.1 Medium
- octobercms octoberOctober CMS CSRFCVE-2017-16244Public exploitFix available8.8 High
- octobercms octoberOctoberCMS Cross-Site ScriptingCVE-2017-15284Public exploitFix available5.4 Medium
- octobercms octoberOctober CMS PHP Code ExecutionCVE-2017-1000119Public exploitEPSS 61.3%7.2 High
- octobercms octoberCross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote...CVE-2015-56135.4 Medium
- octobercms octoberOctober CMS XSS In Caption Tag of ProfileCVE-2015-5612Fix available4.3 Medium