Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 35
Reset filtersContao: Possible path traversal in job download URIs
Contao crawler leaks auth credentials to external hosts
Contao does not properly manage privileges for page and article fields
Contao can disclose sensitive information in the news module
Contao discloses sensitive information in the front end search index
Contao applies improper access control in the back end voters
Contao Vulnerable to Cross-Site Scripting (XSS) through SVG uploads
Contao affected by insert tag injection via canonical URL
Contao affected by directory traversal in the file selector widget
Contao affected by remote command execution through file upload
Contao: Insufficient BBCode sanitizer
Contao: Unencoded insert tags in the frontend
Contao: Cross site scripting in the file manager
Contao: Remember-me tokens will not be cleared after a password change
Contao: Possible cookie sharing with external domains while checking protected pages for broken links
Cross site scripting via input unit widget
Path traversal vulnerability in the file manager
Contao SQL injection in the file manager
Contao SQL injection in the backend and listing module
Cross site scripting via canonical tag in Contao
Contao CSRF Token Bypass
Contao Does Not Invalidate Existing Sessions When Password Changes
Contao Core directory traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.