CO
Product
contao
42
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 3High 6Medium 29Low 4
Watch
Add contao to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26265 | 9.8 | Mar 18 | Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter Affected: 1.5.0 |
| CVE-2019-11512 | 9.8 | Jul 9 | Contao 4.x allows SQL Injection Affected: 4.0.0 before 4.4.39; 4.5.0 before 4.7.5 |
| CVE-2026-107845 | 9.3 | Oct 9 | Contao: Cross-site scripting in the comments bundle Affected: >= 4.0.0, < 5.3.50; >= 5.4.0-RC1, < 5.7.12 |
Showing 3