CVE-2021-35955

Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field

published August 12, 2021

CVSS
—
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field. Fixed in 4.4.56, 4.9.18, 4.11.7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Published
2021-08-12T14:33Z
EPSS history
Timeline
  • 12 AUG 14:33Z
    Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field
    cvelistv5