7 matches found
October CMS - RainLab Blog Plugin XSS
The RainLab Blog Plugin used in October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
Deserialization of untrusted data
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
CVE-2018-7198
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
CVE-2018-7198
CVE-2018-7198 affects October CMS up to version 1.0.431, specifically the RainLab Blog Plugin. It enables stored XSS by entering HTML on the Add Posts page, allowing a malicious payload to be stored and subsequently executed. The issue is documented across multiple sources (GHSA/OSV and exploit r...
CVE-2018-7198
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
CVE-2018-7198: Improper Neutralization of Input During Web Page Generation
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
PT-2018-17944
Name of the Vulnerable Software and Affected Versions October CMS versions through 1.0.431 The RainLab Blog Plugin used in October CMS versions through 1.0.431 Description The issue allows for XSS by entering HTML on the Add Posts page. This can be exploited through the RainLab Blog Plugin...