296,137
Total vulnerabilities in the database
Contao before 5.5.6 allows XSS via an SVG document. This affects (in contao/core-bundle in Composer) 4.x before 4.13.54, 5.0.x through 5.3.x before 5.3.30, and 5.4.x and 5.5..x before 5.5.6.
| Software | From | Fixed in |
|---|---|---|
| contao / contao | 4.0 | 4.13.54 |
| contao / contao | 5.0.0 | 5.3.30 |
| contao / contao | 5.4.0 | 5.5.6 |