Known vulnerabilities in October CMS 1.0.424 - page 2

Vendor: OctoberCMS
Software: October CMS
Version: 1.0.424
Software CPE: cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting October CMS version 1.0.424 October CMS 1.0.424 is affected by 23 vulnerabilities: 3 high, 9 medium, 11 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28766 - External Control of File Name or Path
CVE-2020-5296
CWE-73 Low
No
No
1.0.466 06.06.2020 SB2020060608
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Public exploit available
No
1.0.466 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU36825 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1999008
CWE-79 Low
No
No
1.0.437 23.07.2018 SB2018072324


Showing elements 21 - 40 out of 23