ZeroHour

CVE-2017-16558

CVSS 3.0
9.8 critical
EPSS
1%p66
Published
()
Modified
Description

Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.

Vendors
contao
Products
contao cms
Weakness
CWE-89
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.