| Package | Affected versions | Patched versions |
|---|---|---|
| contao/contao | ≥ 4.0.0, < 4.4.18≥ 4.5.0, < 4.5.8 | 4.4.184.5.8 |
| contao/core | ≥ 3.0.0, < 3.5.35 | 3.5.35 |
| contao/core-bundle | ≥ 3.0.0, < 3.5.35≥ 4.0.0, < 4.4.18≥ 4.5.0, < 4.5.8 | 3.5.354.4.184.5.8 |
| contao | = 4.0.0= 4.1.0= 4.2.0= 4.3.0≥ 3.0.0, ≤ 3.5.33≥ 4.4.0, ≤ 4.4.16≥ 4.5.0, ≤ 4.5.6 |
Contao before 4.5.7 has XSS in the system log.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free