Contao <4.13.3 - Cross-Site Scripting
Contao prior to 4.13.3 contains a cross-site scripting vulnerability. It is possible to inject arbitrary JavaScript code into the canonical tag.
contaoPoC 已收录
CVSS6.1EPSS 54.5%
Contao CMS 是一款免费且开源的内容管理系统 (CMS),可用于创建和管理网站、博客等。它具有强大的功能,如易于使用的界面、多种模板和模块、可扩展性、安全性等,使其成为一个受欢迎的选择。
共找到 2 条公开漏洞记录
Contao prior to 4.13.3 contains a cross-site scripting vulnerability. It is possible to inject arbitrary JavaScript code into the canonical tag.
Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.