CVE-2020-4061: October CMS October

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.

Affected products

• October CMS October: from 1.0.319, before 1.0.467 (fixed in 1.0.467)

Published 2020-07-02. Last modified 2026-06-17.