Contao Cms vulnerabilities

• contao cms Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities CVE-2014-1860 9.8 CriticalJanuary 8, 2020
• contao cms Contao SQL injection in the backend and listing module CVE-2017-16558 Fix available 9.8 CriticalApril 25, 2019
• contao cms Contao Information Disclosure via Access Control Flaws CVE-2018-20028 Fix available 6.5 MediumApril 17, 2019
• contao cms Contao CSRF Token Bypass CVE-2019-10642 Fix available 8.8 HighApril 17, 2019
• contao cms Contao Does Not Expire Tokens Correctly CVE-2019-10643 Fix available 9.8 CriticalApril 17, 2019
• contao cms Contao Does Not Invalidate Existing Sessions When Password Changes CVE-2019-10641 Fix available 9.8 CriticalApril 17, 2019
• contao cms Contao Core directory traversal vulnerability CVE-2017-10993 Fix available 8.8 HighJuly 21, 2017
• contao cms Contao Core directory traversal vulnerability CVE-2015-0269 Fix available 4.3 MediumMay 26, 2017
• contao cms Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly... CVE-2012-1297 Public exploit 6.8 MediumMarch 19, 2012
• contao cms Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote... CVE-2011-4335 Public exploit 4.3 MediumNovember 28, 2011
• contao cms Cross-site scripting (XSS) vulnerability in system/modules/comments/Comments.php in Contao CMS 2... CVE-2011-0508 4.3 MediumJanuary 20, 2011