5 matches found
October CMS - RainLab Blog Plugin XSS
The RainLab Blog Plugin used in October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
6.1CVSS6.2AI score0.02349EPSS
SaveExploits4References5Affected Software1
Deserialization of untrusted data
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
4.3CVSS5.9AI score0.02349EPSS
SaveExploits4References2Affected Software1
CVE-2018-7198
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
6.1CVSS6AI score
SaveExploits0References2
CVE-2018-7198
CVE-2018-7198 affects October CMS up to version 1.0.431, specifically the RainLab Blog Plugin. It enables stored XSS by entering HTML on the Add Posts page, allowing a malicious payload to be stored and subsequently executed. The issue is documented across multiple sources (GHSA/OSV and exploit r...
6.1CVSS5.8AI score0.02349EPSS
SaveExploits4References2Affected Software1
20