Beveiligingsadvies

CVE-2021-35210

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-06-23 09:34:44
Laatst bijgewerkt 2024-08-04 00:33:51
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject code into the tl_log table that will be executed in the browser when the system log is called in the back end.