CVE-2025-29790
Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.
| Software | From | Fixed in |
|---|---|---|
contao / core-bundle
|
4.0.0 | 4.13.54 |
|
contao / core-bundle
|
5.3.0 | 5.3.30 |
|
contao / core-bundle
|
5.4.0 | 5.5.6 |
| contao / contao | 4.0.0 | 4.13.53 |
| contao / contao | 5.0.0 | 5.3.30 |
| contao / contao | 5.4.0 | 5.5.6 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime