CVE-2020-25768

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-25768
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25768.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-25768
Aliases
Published
2020-10-07T21:15:14Z
Modified
2024-11-21T05:18:43Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in front end forms which will be replaced when the page is rendered.

References

Affected packages

Git / github.com/contao/contao

Affected ranges

Type
GIT
Repo
https://github.com/contao/contao
Events