Skip to content
OpenAdvisories

Package · Packagist

contao/core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-5478

    Contao Cross-site Scripting vulnerabililty

    Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.

    contao/core Packagist
  • Medium 6.1
    CVE-2018-10125

    Cross-site Scripting in Contao

    Contao before 4.5.7 has XSS in the system log.

    contao/core-bundle contao/contao contao/core Packagist
  • Medium 4.3
    CVE-2015-0269

    Contao Core directory traversal vulnerability

    Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.

    contao/core Packagist
  • Medium 6.1
    CVE-2016-4567

    MediaElement Vulnerable to Reflected XSS

    Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, …

    contao/core mediaelement mediaelement mediaelement Debian Ubuntu npm Packagist