Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-11083
3.5
LOWCVSS v3
Published
July 14, 2020
CVSS v2
3.5 LOW
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS attack against themselves and any other users with access to the generated HTML from the field. This has been fixed in 1.0.466. For users of the RainLab.Blog plugin, this has also been fixed in 1.4.1.
octobercms/october
GitHubSelf-hosted CMS platform based on the Laravel PHP Framework.
GitHubSelf-hosted CMS platform based on the Laravel PHP Framework.>= 1.0.319, < 1.0.466NVD