October

3 CVEs product

Monthly

CVE-2025-61676 MEDIUM PATCH This Month

October is a Content Management System (CMS) and web platform. Prior to versions 3.7.13 and 4.0.12, a cross-site scripting (XSS) vulnerabilities was identified in October CMS backend configuration forms. [CVSS 6.1 MEDIUM]

XSS October
NVD GitHub
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-61674 MEDIUM PATCH This Month

October is a Content Management System (CMS) and web platform. Prior to versions 3.7.13 and 4.0.12, a cross-site scripting (XSS) vulnerability was identified in October CMS backend configuration forms. [CVSS 6.1 MEDIUM]

XSS October
NVD GitHub
CVSS 3.1
6.1
EPSS
0.0%
CVE-2024-51991 LOW PATCH Monitor

October is a Content Management System (CMS) and web platform. Rated low severity (CVSS 1.1), this vulnerability is remotely exploitable, low attack complexity. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.

File Upload October
NVD GitHub
CVSS 4.0
1.1
EPSS
0.3%
CVE-2025-61676
EPSS 0% CVSS 6.1
MEDIUM PATCH This Month

October is a Content Management System (CMS) and web platform. Prior to versions 3.7.13 and 4.0.12, a cross-site scripting (XSS) vulnerabilities was identified in October CMS backend configuration forms. [CVSS 6.1 MEDIUM]

XSS October
NVD GitHub
CVE-2025-61674
EPSS 0% CVSS 6.1
MEDIUM PATCH This Month

October is a Content Management System (CMS) and web platform. Prior to versions 3.7.13 and 4.0.12, a cross-site scripting (XSS) vulnerability was identified in October CMS backend configuration forms. [CVSS 6.1 MEDIUM]

XSS October
NVD GitHub
CVE-2024-51991
EPSS 0% CVSS 1.1
LOW PATCH Monitor

October is a Content Management System (CMS) and web platform. Rated low severity (CVSS 1.1), this vulnerability is remotely exploitable, low attack complexity. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.

File Upload October
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy