296,760
Total vulnerabilities in the database
Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field. Fixed in 4.4.56, 4.9.18, 4.11.7.
| Software | From | Fixed in |
|---|---|---|
| contao / contao | 4.10.0 | 4.11.7 |
| contao / contao | 4.5.0 | 4.9.18 |
| contao / contao | 4.0.0 | 4.4.56 |
contao / core-bundle
|
4.0.0 | 4.4.56 |
contao / core-bundle
|
4.9.0 | 4.9.18 |
contao / core-bundle
|
4.11.0 | 4.11.7 |