CVE-2021-35210

Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS

published June 23, 2021

CVSS
—
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject code into the tl_log table that will be executed in the browser when the system log is called in the back end.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00740 · 54.1th percentile
Published
2021-06-23T09:34Z
EPSS history
Timeline
  • 23 JUN 09:34Z
    Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS
    cvelistv5