Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-4061
3.7
LOWCVSS v3
Published
July 2, 2020
CVSS v2
3.5 LOW
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.
octobercms/october
GitHubSelf-hosted CMS platform based on the Laravel PHP Framework.
GitHubSelf-hosted CMS platform based on the Laravel PHP Framework.>= 1.0.319, < 1.0.467NVD