Security advisories

Here you will find a list of vulnerabilities that have already been found and fixed in Contao. If you think that you have found a security issue in Contao, please report it according to our security policy.

2022

by Leo Feyer

Cross-site scripting via canonical URL

Date
05.05.2022

CVE ID
CVE-2022-24899

Package
contao/core-bundle

Affected versions
>=4.13.0

Patched versions
4.13.3

Security advisory