CVE-2019-19714 | BDVDB-2026-127643 Detail

Description#

Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://contao.org/en/news.html
https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html

Exploit#

No public exploit known

History#

Version 12019-12-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.