Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filtersOctober CMS has Safe Mode Bypass via Twig Database Write Operations
October CMS Allows Unprotected SVG Rename in Media Manager
October allows an admin account to upload PDF containing malicious JavaScript
October CMS Cross-site Scripting vulnerability
Stored Cross-Site Scripting October CMS
October CMS XSS In Caption Tag of Profile
October CMS CSRF
October CMS Local File Inclusion
October CMS File Upload Vulnerability
October CMS XSS
Deleted Admin Can Sign In to Admin Interface
Use of insecure jQuery version in OctoberCMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.