| Package | Affected versions | Patched versions |
|---|---|---|
| contao/contao | ≥ 3.0.0, ≤ 3.5.30≥ 4.0.0, < 4.4.8 | 4.4.8 |
| contao/core-bundle | ≥ 3.0.0, ≤ 3.5.30≥ 4.0.0, < 4.4.8 | 4.4.8 |
| contao/listing-bundle | ≥ 3.0.0, ≤ 3.5.30≥ 4.0.0, < 4.4.8 | 4.4.8 |
| contao cms | ≥ 3.0.0, ≤ 3.5.30≥ 4.0.0, ≤ 4.4.7 |
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the backend as well as in the listing module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free