October CMS code injection vulnerability

October CMS is an open source content management system (CMS) based on PHP and the Laravel web application framework. October CMS is vulnerable to a code injection vulnerability that originates when a web system or product fails to properly filter special elements in code segments constructed from external input data. An attacker could use this vulnerability to inject and execute malicious code.