Security advisories
Here you will find a list of vulnerabilities that have already been found and fixed in Contao. If you think that you have found a security issue in Contao, please report it according to our security policy.
2024
Session cookie disclosure in the crawler
by Leo Feyer
Cross site scripting in the file manager
by Leo Feyer
Insert tag injection via the form generator
by Leo Feyer