october/october

Composer · Package

13 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
October CMS: Incomplete Scheme Validation in Image ResizerCVE-2026-100909 · GHSA-2XMM-M4WV-3FJH	october/october	Composer	Low	Fix reported	2026-09-29
Deleted Admin Can Sign In to Admin InterfaceCVE-2021-41126 · GHSA-6GJF-7W99-J7X7	october/october october/system	Composer	High	Fix reported	2026-07-08
October CMS has Safe Mode Bypass via Twig Database Write OperationsCVE-2026-26274 · GHSA-H6JM-F4HH-FW27	october/october	Composer	Medium	Fix reported	2026-05-05
October CMS Cross-site Scripting vulnerabilityCVE-2023-25365 · GHSA-GCGJ-QH8P-57HM	october/october	Composer	High	No fix reported	2026-03-14
October CMS Allows Unprotected SVG Rename in Media ManagerCVE-2024-51991 · GHSA-96HH-8HX5-CPW7	october/october october/system	Composer	Low	Fix reported	2025-05-24
Use of insecure jQuery version in OctoberCMSGHSA-V73W-R9XG-7CR9	october/october october/system	Composer	Medium	Fix reported	2024-12-02
October allows an admin account to upload PDF containing malicious JavaScriptCVE-2024-45962 · GHSA-HXPP-G76M-QHVG	october/october	Composer	Low	No fix reported	2024-10-03
October CMS Local File InclusionCVE-2018-1999009 · GHSA-V7CR-W5V6-6659	october/october	Composer	High	Fix reported	2024-02-22
October CMS CSRF CVE-2017-16244 · GHSA-VM6R-4P4V-232X	october/october	Composer	High	Fix reported	2024-02-21
Stored Cross-Site Scripting October CMSCVE-2023-37692 · GHSA-R47V-RXCG-P28J	october/october	Composer	Medium	No fix reported	2024-02-19
October CMS File Upload VulnerabilityCVE-2017-1000194 · GHSA-8VH6-8W76-V6M3	october/october	Composer	Critical	Fix reported	2024-02-16
October CMS XSSCVE-2017-1000193 · GHSA-3P6C-9XHM-8X7H	october/october	Composer	Medium	Fix reported	2024-02-16
October CMS XSS In Caption Tag of ProfileCVE-2015-5612 · GHSA-9HQ8-V2JC-QJ4R	october/october	Composer	Medium	Fix reported	2023-11-08