CVE-2019-19714

Impact

Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://contao.org/en/news.html
• https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html
• https://contao.org/en/news.html
• https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html