Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2018-5478
HistorySep 21, 2023 - 12:00 a.m.

CVE-2018-5478

2023-09-2100:00:00
mitre
github.com
contao 3.x unsecured
xss vulnerability
unsubscribe module

AI Score

5.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.

AI Score

5.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial