Template Injection

October CMS is vulnerable to Template Injection. The vulnerability is caused by a crafted request which includes PHP code in the CMS template, where an authenticated backend user possessing the editor.cms_pages, editor.cms_layouts, or editor.cms_partials can execute arbitrary PHP code even when the cms.safe_mode us enabled. This issue can be exploited by an attacker via crafting a mailicious request resulting in execution of arbitrary PHP code.