Security advisories
Here you will find a list of vulnerabilities that have already been found and fixed in Contao. If you think that you have found a security issue in Contao, please report it according to our security policy.
2020
by Leo Feyer
Insert tag injection in forms
Date
24.09.2020
CVE ID
CVE-2020-25768
Package
contao/core-bundle
Affected versions
>=4.0.0
Patched versions
4.4.52, 4.9.6, 4.10.1
Security advisory