contao Summary
Latest vulnerabilities published by contao
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Authorization Flaw in Contao Open Source CMS Affects User Permissions
CVE-2026-107851ContaoContao4.3MEDIUMAccess Control Flaw in Contao CMS Affects Core Functionality
CVE-2026-107850ContaoContao4.3MEDIUMCSRF Vulnerability in Contao CMS Affects Multiple Versions
CVE-2026-107848ContaoContao3.5LOWCross-Site Scripting Vulnerability in Contao Open Source CMS
CVE-2026-107845ContaoContao9.3CRITICALPath Traversal Vulnerability in Contao CMS by Contao
CVE-2026-107844ContaoContao5.3MEDIUMInsufficient Verification in Registration Module of Contao Open Source CMS
CVE-2026-107843ContaoContao5.3MEDIUMOpen Source CMS Contao Vulnerability in ModuleSearch Settings
CVE-2026-107842ContaoContao5.3MEDIUMCross-Job Authorization Bypass in Contao Open Source CMS
CVE-2026-55825ContaoContao3.1LOWCredential Leakage in Contao Open Source CMS
CVE-2026-55824ContaoContao2.6LOWOpen Source CMS Feed Reader Vulnerability in Contao by Contao
CVE-2026-57232ContaoContao3.1LOWCross-site Scripting in Contao Open Source CMS
CVE-2025-65961ContaoContao3.3LOWRemote Code Execution Vulnerability in Contao CMS by Contao
CVE-2025-65960ContaoContao6.6MEDIUMImproper Permission Management in Contao Open Source CMS
CVE-2025-57759ContaoContao4.3MEDIUMImproper Access Control in Contao Open Source CMS
CVE-2025-57758ContaoContao4.3MEDIUMInformation Disclosure Vulnerability in Contao CMS
CVE-2025-57757ContaoContao5.3MEDIUMInformation Disclosure in Contao Open Source CMS
CVE-2025-57756ContaoContao5.3MEDIUMCross-Site Scripting Vulnerability in Contao CMS
CVE-2025-29790ContaoContao4.8MEDIUMContao 5.4.1 Vulnerability Allows for Malicious Code Execution via SVG File Upload
CVE-2024-45965ContaoContao6.4MEDIUMRemote Command Execution Vulnerability in Contao CMS
CVE-2024-45398ContaoContao8.8HIGHDirectory Traversal Vulnerability in Contao Open Source CMS
CVE-2024-45604ContaoContao4.3MEDIUMInsert Tag Injection Vulnerability in Contao CMS
CVE-2024-45612ContaoContao5.3MEDIUMContao's remember-me tokens will not be cleared after a password change
CVE-2024-30262ContaoContao7.1HIGHContao Sends Cookie Header to External Urls in Protected Pages, Patch Available
CVE-2024-28235ContaoContao6.5MEDIUMCSS Injection Vulnerability Affects Contao CMS Versions
CVE-2024-28234ContaoContao4.7MEDIUMContao Vulnerability: Injection Attacks Possible in Certain Versions
CVE-2024-28191ContaoContao5.4MEDIUM