Executive brief
Insert tag injection in the Contao login module
Affected products
- Packagist contao/core-bundle
- Packagist contao/contao
Junglewise Threat Intelligence
CVE-2019-19714: Insert tag injection in the Contao login module
CVE-2019-19714 · Severity: low · CVSS 3.1 · Published 2019-12-17
Technologies: contao/core-bundle (Packagist), contao/contao (Packagist). Vendors: Packagist.
Related threats
- Contao path traversal in job attachment downloads
- Duplicate Advisory: Contao allows admin an account to upload SVG file containing malicious JavaScript
- Contao affected by directory traversal in the file selector widget
- Contao: Remember-me tokens will not be cleared after a password change
- Cross site scripting via canonical tag in Contao