Vulnerabilities > Octobercms > October > 3.4.4

DATE CVE VULNERABILITY TITLE RISK
2023-12-01 CVE-2023-44381 Code Injection vulnerability in Octobercms October
October is a Content Management System (CMS) and web platform to assist with development workflow.
network
low complexity
octobercms CWE-94
4.9
2023-12-01 CVE-2023-44382 Code Injection vulnerability in Octobercms October
October is a Content Management System (CMS) and web platform to assist with development workflow.
network
low complexity
octobercms CWE-94
critical
9.1
2023-11-29 CVE-2023-44383 Cross-site Scripting vulnerability in Octobercms October
October is a Content Management System (CMS) and web platform to assist with development workflow.
network
low complexity
octobercms CWE-79
5.4
2023-07-26 CVE-2023-37692 Cross-site Scripting vulnerability in Octobercms October 3.4.4
An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file.
network
low complexity
octobercms CWE-79
5.4