Vulnerabilities > Octobercms > October > 1.0.466

DATE CVE VULNERABILITY TITLE RISK
2020-11-23 CVE-2020-15247 Unspecified vulnerability in Octobercms October
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.
local
octobercms
4.4
2020-11-23 CVE-2020-15246 Path Traversal vulnerability in Octobercms October
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.
network
low complexity
octobercms CWE-22
5.0
2020-07-31 CVE-2020-15128 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Octobercms October
In OctoberCMS before version 1.0.468, encrypted cookie values were not tied to the name of the cookie the value belonged to.
3.5
2020-07-02 CVE-2020-4061 Cross-site Scripting vulnerability in Octobercms October
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack.
network
octobercms CWE-79
3.5