Security advisories
Here you will find a list of vulnerabilities that have already been found and fixed in Contao. If you think that you have found a security issue in Contao, please report it according to our security policy.
2022
by Leo Feyer
Cross-site scripting via canonical URL
Date
05.05.2022
CVE ID
CVE-2022-24899
Package
contao/core-bundle
Affected versions
>=4.13.0
Patched versions
4.13.3
Security advisory