OctoberCMS vulnerabilities

CVEs whose affected-version data names the OctoberCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-100909High· 7.3PoC

1mo ago

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results i…

▾ MidnightEPSS 0.30%via NVD