GHSA-J55W-HJPJ-825G Contao: Insufficient BBCode sanitizer

Impact If BBCode is enabled for comments, users can inject CSS styles. Patches Update to Contao 4.13.40 or 5.3.4. Workarounds Disable BBCode for comments. References https://contao.org/en/security-advisories/insufficient-bbcode-sanitization For more information If you have any questions or commen...

PT-2022-13985

Name of the Vulnerable Software and Affected Versions contao/contao versions prior to 4.13.3 Description The issue is related to Cross-site Scripting XSS in the contao/contao GitHub repository. An attacker can execute malicious JavaScript in the application. Recommendations For versions prior to...