pkg:Packagist/october/october

All known vulnerabilities

• CRITICAL9.8CVE-2017-1000194October CMS File Upload Vulnerability
  from 0, < 1.0.413
• HIGH8.8CVE-2017-16244October CMS CSRF
  from 0, < 1.0.427
• HIGH8.1CVE-2018-1999009October CMS Local File Inclusion
  from 0, < 1.0.437
• HIGH7.8October CMS Cross-site Scripting vulnerability
  from 0, <= 3.2.0
• HIGH7.2Deleted Admin Can Sign In to Admin Interface
  >= 2.1.0, < 2.1.12
• MEDIUM6.6October CMS has Safe Mode Bypass via Twig Database Write Operations
  from 0, < 3.7.14
• MEDIUM6.1October CMS XSS
  from 0, < 1.0.413
• MEDIUM5.4Stored Cross-Site Scripting October CMS
  from 0, <= 3.4.4
• MEDIUM4.8October allows an admin account to upload PDF containing malicious JavaScript
  from 0, <= 3.6.4
• —October CMS Allows Unprotected SVG Rename in Media Manager
  from 0, < 3.7.5
• —October CMS XSS In Caption Tag of Profile
  from 0, < 1.0.319