critical9.8
CVE-2017-16558
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.
Impact
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contao | Contao Cms | from 3.0.0 through 3.5.30 from 4.0.0 through 4.4.7 |