medium5.3
CVE-2020-25768
Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation.
Impact
Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in front end forms which will be replaced when the page is rendered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contao | Contao | from 4.0 before 4.4.52 from 4.9.0 before 4.9.6 from 4.10.0 before 4.10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.contao.org/en/forumdisplay.php?4-Announcements
- https://contao.org/en/security-advisories/insert-tag-injection-in-forms.html
- https://community.contao.org/en/forumdisplay.php?4-Announcements
- https://contao.org/en/security-advisories/insert-tag-injection-in-forms.html