Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

Contao

Contao is an open source content management system (CMS) for people who want a professional internet presence that is easy to maintain. The state-of-the-art structure of the system offers a high security standard and allows you to develop search engine friendly websites that are also accessible for people with disabilities. Furthermore the system can be expanded flexibly and inexpensively.

Official Site:

https://contao.org/en/

Severity Summary:

Critical: 5 High: 8 Medium: 29
Reference
Title
Severity
CVE-2022-24899
Contao Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-35955
Contao Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-35210
Contao Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-25768
Contao Improper Input Validation Vulnerability
Medium
CVE-2011-0508
Contao Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-4335
Contao Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-1297
Contao Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2015-0269
Contao Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Medium
CVE-2018-20028
Contao Vulnerability
Medium
CVE-2019-19712
Contao Incorrect Default Permissions Vulnerability
Medium
CVE-2019-19714
Contao Improper Encoding or Escaping of Output Vulnerability
Medium
CVE-2025-65961
Contao Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium