October CMS XSS In Caption Tag of Profile

MEDIO 4.3CVE-2015-5612 · GHSA-9hq8-v2jc-qj4r · Published 04/09/2015 · updated 17/06/2026

In breve

CVE-2015-5612 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda october/october.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.9% delle vulnerabilità.
Correzione: aggiornare a 1.0.319 o successiva.

Package	Affected versions	Patched versions
october/october Packagist	`< 1.0.319`	`1.0.319`

Description

Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

NVD description

Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

References

nvd.nist.gov/vuln/detail/CVE-2015-5612 · ADVISORY
octobercms/october · WEB
octobercms/october commit 8a4ac53 · WEB
openwall.com/lists/oss-security/2015/07/21/5 · WEB
openwall.com/lists/oss-security/2015/07/22/3 · WEB

Altre vulnerabilità di october/october

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

october/october

Packagist

< 1.0.319

1.0.319

Description

Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

NVD description

Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

Altre vulnerabilità di october/october

Vedi tutto →