High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-17	CVE-2019-10642	Cross-Site Request Forgery (CSRF) vulnerability in Contao CMS 4.7.0 Contao 4.7 allows CSRF. network low complexity contao CWE-352	8.8
2017-07-21	CVE-2017-10993	Path Traversal vulnerability in Contao CMS Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal. network low complexity contao CWE-22	8.8