Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-10125 EUVD-2022-1129GHSA-pj4j-287j-f742

Cross-site Scripting in Contao

Published Mar 16, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Package: contao/contao Package: contao/core Package: contao/core-bundle Ecosystem: Packagist

Description

Contao before 4.5.7 has XSS in the system log.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist contao/contao >= 4.0.0, < 4.4.18 4.4.18 GHSA-pj4j-287j-f742
Packagist contao/contao >= 4.5.0, < 4.5.8 4.5.8 GHSA-pj4j-287j-f742
Packagist contao/core >= 3.0.0, < 3.5.35 3.5.35 GHSA-pj4j-287j-f742
Packagist contao/core-bundle >= 4.0.0, < 4.4.18 4.4.18 GHSA-pj4j-287j-f742
Packagist contao/core-bundle >= 4.5.0, < 4.5.8 4.5.8 GHSA-pj4j-287j-f742
Packagist contao/core-bundle >= 3.0.0, < 3.5.35 3.5.35 GHSA-pj4j-287j-f742

References