Description
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| October CMS | October | >= 1.0.319, < 1.0.467 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | october/backend | >= 1.0.319, < 1.0.467 | 1.0.467 | GHSA-3pc2-fm7p-q2vg |