CC
Product
Contao Cms
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 2Low 0
Watch
Add Contao Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-1860 | 9.8 | Jan 8 | Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities Affected: through 3.2.4 |
| CVE-2017-16558 | 9.8 | Apr 25 | Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module Affected: 3.0.0 through 3.5.30; 4.0.0 through 4.4.7 |
| CVE-2019-10643 | 9.8 | Apr 17 | Contao 4.7 allows Use of a Key Past its Expiration Date Affected: 4.7.0 |
| CVE-2019-10641 | 9.8 | Apr 17 | Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password Affected: before 3.5.39; 4.0.0 before 4.7.3 |
Showing 4