pkg:Packagist/october/backend
7 total CVEsMEDIUM3LOW3
✅ Check your installed version
All known vulnerabilities
MEDIUM4.0CVE-2020-15248Privilege escalation by backend users assigned to the default "Publisher" system role >= 1.0.319, < 1.0.470
MEDIUM4.0CVE-2020-5299Potential CSV Injection vector in OctoberCMS >= 1.0.319, < 1.0.466
MEDIUM4.0CVE-2020-5298Reflected XSS when importing CSV in OctoberCMS >= 1.0.319, < 1.0.466
LOW3.7Cross-site Scripting in October
>= 1.0.319, < 1.0.467
LOW3.5Stored XSS in October
>= 1.0.319, < 1.0.466
LOW2.8Stored XSS by authenticated backend user with access to upload files
>= 1.0.319, < 1.0.469
—October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
from 0, < 1.1.2