CVE-2019-19714

Publication date

2019-12-17 14:04:03

Family

mitre

State

PUBLISHED

Description

Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered.