Vulnerability Database
296,137
Total vulnerabilities in the database
CVE-2025-29790
Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.
| Software | From | Fixed in |
|---|---|---|
contao / core-bundle
|
4.0.0 | 4.13.54 |
|
contao / core-bundle
|
5.3.0 | 5.3.30 |
|
contao / core-bundle
|
5.4.0 | 5.5.6 |