CVE-2020-11083
LOWOctober CMS 1.0.319-1.0.465 - Stored Cross-Site Scripting via Markdown FormWidget
Title source: llmDescription
In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS attack against themselves and any other users with access to the generated HTML from the field. This has been fixed in 1.0.466. For users of the RainLab.Blog plugin, this has also been fixed in 1.4.1.
References (5)
Core 5
Core References
Patch, Third Party Advisory x_refsource_confirm
https://github.com/octobercms/october/security/advisories/GHSA-w4pj-7p68-3vgv
Patch, Third Party Advisory x_refsource_misc
https://github.com/octobercms/october/commit/9ecfb4867baae14a0d3f99f5b5c1e8a979ae8746
Patch, Third Party Advisory x_refsource_misc
https://github.com/rainlab/blog-plugin/commit/6ae19a6e16ef3ba730692bc899851342c858bb94
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.html
Exploit, Mailing List, Third Party Advisory mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Aug/2
Scores
CVSS v3
3.5
EPSS
0.0115
EPSS Percentile
62.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
october/backend
1.0.319 - 1.0.466Packagist
octobercms/october
1.0.319 - 1.0.466
Published
Jul 14, 2020
Tracked Since
Feb 18, 2026