Cross-Site Scripting Vulnerabilities in Contao by Contao GmbH
CVE-2011-4335

Currently unrated

Key Information:

Vendor: Contao
Status: Contao Cms
Vendor: CVE Published:; 28 November 2011

What is CVE-2011-4335?

Contao, a content management system, has been identified to have multiple vulnerabilities that allow remote attackers to exploit the application through cross-site scripting (XSS). Specifically, malicious scripts or HTML can be injected through the PATH_INFO variable in HTTP requests sent to index.php, particularly targeting the teachers.html and teachers/ actions in versions prior to 2.10.2. This could potentially lead to unauthorized actions being performed within the user’s session, thereby compromising the security integrity of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch