Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-44383
5.4
MEDIUMCVSS v3
Published
November 29, 2023
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
October is a Content Management System (CMS) and web platform to assist with development workflow. A user with access to the media manager that stores SVG files could create a stored XSS attack against themselves and any other user with access to the media manager when SVG files are supported. This issue has been patched in version 3.5.2.
octobercms/october
GitHubSelf-hosted CMS platform based on the Laravel PHP Framework.
GitHubSelf-hosted CMS platform based on the Laravel PHP Framework.>= 3.0.0, < 3.5.2NVD