CVEvulnerability
CVE-2019-19714
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-116
Description
Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered.
Affected configurations
• contao contao 4.8.4
• contao contao 4.8.5
Related
Weakness · CWE (1)
- CWE-116 Improper Encoding or Escaping of Output weakness
References
- https://contao.org/en/news.html Vendor Advisory
- https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html Vendor Advisory
- https://contao.org/en/news.html Vendor Advisory
- https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html Vendor Advisory