GHSA-q263-j3q9-g964
October CMS PHP Code Execution
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | october/cms | <= 1.0.412 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.
References
External links from the advisory. They lead to third-party sites.