CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2020/07/02 5:15 p.m.•29 views

CVE-2020-4061

In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467...

5.4CVSS5.5AI score

SaveExploits0References3

Cvelist•added 2020/07/02 4:55 p.m.•40 views

CVE-2020-4061 Cross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites

3.7CVSS5.4AI score0.00821EPSS

SaveExploits1References3

Github Security Blog•added 2020/07/02 4:55 p.m.•50 views

Cross-site Scripting in October

Impact Pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. Patches Issue has been patched in Build 467 v1.0.467. Workarounds Apply https://github.com/octobercms/october/commit/b384954a29b89117e1c0d6035b3ede4f46df67c5 to your...

5.4CVSS4.7AI score0.00821EPSS

SaveExploits1References5Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/07/02 12:00 a.m.•2 views

CVE-2020-4061: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.8AI score0.00821EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by