Security
فارسی
All products

october/system

Composer · Package
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
October CMS: PHP Object Injection via Backend Widget Session StorageCVE-2026-49400 · GHSA-2FF2-MX52-Q8WP october/system Composer Low Fix reported
October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder CallsCVE-2026-46696 · GHSA-XV9M-FM3W-8W5X october/system Composer Low Fix reported
October CMS stored XSS by authenticated backend user with improper configurationCVE-2023-44383 · GHSA-RVX8-P3XP-FJ3P october/system Composer Medium Fix reported
October CMS auth bypass and account takeoverCVE-2021-29487 · GHSA-H76R-VGF3-J6W5 october/system Composer High Fix reported
October/System authenticated file write leads to remote code executionCVE-2021-32649 · GHSA-WV23-PFJ7-2MJJ october/system Composer High Fix reported
Deleted Admin Can Sign In to Admin InterfaceCVE-2021-41126 · GHSA-6GJF-7W99-J7X7 october/octoberoctober/system Composer High Fix reported
october/system arbitrary code executionCVE-2021-32650 · GHSA-5HFJ-R725-WPC4 october/system Composer High Fix reported
Account Takeover in OctobercmsCVE-2021-32648 · GHSA-MXR5-MC97-63RC october/system Composer High Fix reported
October CMS: Editor Sub-Permission Bypass for Asset and Blueprint File OperationsCVE-2026-29179 · GHSA-JVWG-PHXX-J3RP october/system Composer Low Fix reported
October CMS: Reflected XSS via DataTable Form WidgetCVE-2026-27937 · GHSA-JJ38-H5W5-MVPF october/system Composer Low Fix reported
October CMS has Stored XSS in Event Log Mail PreviewCVE-2026-24907 · GHSA-J4J5-9X6G-RGXC october/system Composer Medium Fix reported
October CMS has Stored XSS in Backend Editor Markup ClassesCVE-2026-24906 · GHSA-6QMH-J78V-FFP7 october/system Composer Medium Fix reported
October CMS has Safe Mode Bypass via CSS Preprocessor CompilersCVE-2026-26067 · GHSA-3888-Q23F-X7QH october/system Composer Medium Fix reported
October CMS Vulnerable to Stored XSS via Branding StylesCVE-2025-61676 · GHSA-WVPQ-H33F-8RP6 october/system Composer Medium Fix reported
October CMS Vulnerable to Stored XSS via Editor and Branding StylesCVE-2025-61674 · GHSA-GXXC-M74C-F48X october/system Composer Medium Fix reported
October CMS Allows Unprotected SVG Rename in Media ManagerCVE-2024-51991 · GHSA-96HH-8HX5-CPW7 october/octoberoctober/system Composer Low Fix reported
Use of insecure jQuery version in OctoberCMSGHSA-V73W-R9XG-7CR9 october/octoberoctober/system Composer Medium Fix reported
October System module has a Reflected XSS via X-October-Request-Handler HeaderCVE-2024-25637 · GHSA-RJW8-V7RR-R563 october/system Composer Low Fix reported
October System module has an Open Redirect for Administrator AccountsCVE-2024-24764 · GHSA-V2VF-JV88-3FP5 october/system Composer Low Fix reported
Authenticated remote code execution in October CMSCVE-2022-21705 · GHSA-79JW-2F46-WV22 october/system Composer High Fix reported