Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2020-4061

Cross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

October CMS October

  • >= 1.0.319, < 1.0.467affected

References