Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Contao Vulnerability - CVE-2024-28234 - Vulnerability Database
Contao

Contao Vulnerability - CVE-2024-28234

Medium
Reference: CVE-2024-28234
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-28234
Title: Contao Vulnerability
Overview:

Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4 it is possible to inject CSS styles via BBCode in comments. Installations are only affected if BBCode is enabled. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround disable BBCode for comments.