EUVD-2019-0796

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Contao 4.8.4 and 4.8.5 allows output injection via login module, risking security breaches.

Reporter	Title	Published	Views	Family All 12
CNVD	Contao Output Improperly Encoded or Escaped Vulnerability	18 Dec 201900:00	–	cnvd
Contao	Insert tag injection in the login module	17 Dec 201900:00	–	contao
CVE	CVE-2019-19714	17 Dec 201914:04	–	cve
Cvelist	CVE-2019-19714	17 Dec 201914:04	–	cvelist
Friends Of PHP	Insert tag injection in the login module	17 Dec 201911:43	–	friendsofphp
Friends Of PHP	Insert tag injection in the login module	17 Dec 201911:43	–	friendsofphp
Github Security Blog	Insert tag injection in the Contao login module	17 Dec 201922:53	–	github
NVD	CVE-2019-19714	17 Dec 201915:15	–	nvd
OSV	GHSA-JC43-QRRP-98F5 Insert tag injection in the Contao login module	17 Dec 201922:53	–	osv
Prion	Design/Logic Flaw	17 Dec 201915:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "397afe13-2176-3fc0-9b39-58854fb479a4",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "af828842-72cf-36f7-acf5-efeddf2b192c",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/contao/contao/security/advisories/GHSA-jc43-qrrp-98f5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-19714
contao	www.contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-19714.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-19714.yaml
github	www.github.com/contao/contao
contao	www.contao.org/en/news.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.3

CVSS 25

EPSS0.0021