Vulnerabilities > Contao

DATE CVE VULNERABILITY TITLE RISK
2024-09-17 CVE-2024-45398 Unrestricted Upload of File with Dangerous Type vulnerability in Contao
Contao is an Open Source CMS.
network
low complexity
contao CWE-434
8.8
2024-09-17 CVE-2024-45604 Path Traversal vulnerability in Contao
Contao is an Open Source CMS.
network
low complexity
contao CWE-22
4.3
2024-09-17 CVE-2024-45612 Injection vulnerability in Contao
Contao is an Open Source CMS.
network
low complexity
contao CWE-74
5.3
2023-09-21 CVE-2018-5478 Cross-site Scripting vulnerability in Contao
Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.
network
low complexity
contao CWE-79
6.1
2023-07-25 CVE-2023-36806 Cross-site Scripting vulnerability in Contao
Contao is an open source content management system.
network
low complexity
contao CWE-79
5.4
2023-04-25 CVE-2023-29200 Path Traversal vulnerability in Contao
Contao is an open source content management system.
network
low complexity
contao CWE-22
6.5
2022-05-06 CVE-2022-24899 Cross-site Scripting vulnerability in Contao 4.13.0/4.13.1/4.13.2
Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications.
network
low complexity
contao CWE-79
6.1
2022-03-18 CVE-2022-26265 OS Command Injection vulnerability in Contao 1.5.0
Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.
network
low complexity
contao CWE-78
critical
9.8
2021-08-12 CVE-2021-35955 Cross-site Scripting vulnerability in Contao
Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field.
network
low complexity
contao CWE-79
4.8
2021-08-11 CVE-2021-37626 Code Injection vulnerability in Contao
Contao is an open source CMS that allows you to create websites and scalable web applications.
network
low complexity
contao CWE-94
7.2