Cross-site Scripting in Contao

🗓️ 10 Feb 2022 20:49:48Reported by GitHub Advisory DatabaseType

Contao 4.5.7 XSS in system log

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2018-10125	16 Mar 202017:46	–	circl
CNVD	Contao Cross-Site Scripting Vulnerability	19 Mar 202000:00	–	cnvd
Contao	Cross site scripting in the system log	18 Apr 201800:00	–	contao
CVE	CVE-2018-10125	16 Mar 202014:40	–	cve
Cvelist	CVE-2018-10125	16 Mar 202014:40	–	cvelist
EUVD	EUVD-2022-1129	3 Oct 202520:07	–	euvd
Friends Of PHP	Cross-site scripting (XSS) vulnerability in the system log of the back end	18 Apr 201809:23	–	friendsofphp
Friends Of PHP	Cross-site scripting (XSS) vulnerability in the system log of the back end	18 Apr 201809:23	–	friendsofphp
Friends Of PHP	Cross-site scripting (XSS) vulnerability in the system log of the back end	18 Apr 201809:51	–	friendsofphp
NVD	CVE-2018-10125	16 Mar 202015:15	–	nvd

Vulners

Node

contao core-bundleRange3.0.0–3.5.35composer

contao coreRange3.0.0–3.5.35composer

contao core-bundleRange4.5.0–4.5.8composer

contao core-bundleRange4.0.0–4.4.18composer

contao contaoRange4.5.0–4.5.8composer

contao contaoRange4.0.0–4.4.18composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-10125
contao	www.contao.org/en/security-advisories/cross-site-scripting-in-the-system-log.html
contao	www.contao.org/en/news/contao-3_5_35.html
contao	www.contao.org/en/news/contao-4_4_18.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2018-10125.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2018-10125.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2018-10125.yaml
github	www.github.com/advisories/GHSA-pj4j-287j-f742

06 Feb 2024 11:54Current

1.4Low risk

Vulners AI Score1.4

CVSS 24.3

CVSS 3.16.1

EPSS0.00328