CVE-2019-19714

Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output

published December 17, 2019

CVSS
—
EPSS
1%
Percentile
56.8
In the wild
Unconfirmed
What it is

Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00819 · 56.8th percentile
Published
2019-12-17T14:04Z
EPSS history
Timeline
  • 17 DEC 14:04Z
    Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output
    cvelistv5