contao/core vulnerabilities (Packagist)

9 vulnerabilities.

• contao/core Packagist contao/core PHP object injection vulnerability allows for arbitrary code execution GHSA-wq43-8r5p-w3mc Fix available No scoreMay 15, 2024
• contao/core Packagist contao/core Insufficient input validation allows for code injection and remote execution GHSA-wxxw-5gq6-j2g5 Fix available 9.0 CriticalMay 15, 2024
• contao/core Packagist Contao Cross-site Scripting vulnerabililty CVE-2018-5478 Fix available 6.1 MediumSeptember 21, 2023
• contao/core Packagist Cross-site Scripting in Contao CVE-2018-10125 Fix available 6.1 MediumMarch 16, 2020
• contao/core Packagist Contao core SQL Injection Vulnerability CVE-2012-4383 Fix available 8.8 HighJanuary 29, 2020
• contao/core Packagist Contao Does Not Invalidate Existing Sessions When Password Changes CVE-2019-10641 Fix available 9.8 CriticalApril 17, 2019
• contao/core Packagist Contao Core directory traversal vulnerability CVE-2017-10993 Fix available 8.8 HighJuly 21, 2017
• contao/core Packagist Contao Core directory traversal vulnerability CVE-2015-0269 Fix available 4.3 MediumMay 26, 2017
• contao/core Packagist MediaElement Vulnerable to Reflected XSS CVE-2016-4567 Fix available 6.1 MediumMay 22, 2016