Security advisories

Here you will find a list of vulnerabilities that have already been found and fixed in Contao. If you think that you have found a security issue in Contao, please report it according to our security policy.

2020

by Leo Feyer

Insert tag injection in forms

Date
24.09.2020

CVE ID
CVE-2020-25768

Package
contao/core-bundle

Affected versions
>=4.0.0

Patched versions
4.4.52, 4.9.6, 4.10.1

Security advisory