Description (CNA)
Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://contao.org/en/news.html
- https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html
ADP enrichment
No English description supplied.