https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 23:15:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4476 EUVD-2026-4476 https://cve.radiocsirt.org/vuln/euvd-2026-4476 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28191 <p>Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in frontend forms if the output is structured in a very specific way. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, do not output user data from frontend forms next to each other, always separate them by at least one character.</p> <p>Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in frontend forms if the output is structured in a very specific way. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, do not output user data from frontend forms next to each other, always separate them by at least one character.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28191 https://cve.radiocsirt.org/vuln/ghsa-747v-52c4-8vj8 <p><strong>Affected:</strong> Packagist: contao/core-bundle</p> <p>### Impact</p> <p>It is possible to inject insert tags via the form generator if the submitted form data is output on the page in a specific way.</p> <p>### Patches</p> <p>Update to Contao 4.13.40 or 5.3.4.</p> <p>### Workarounds</p> <p>Do not output the submitted form data on the website.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/insert-tag-injection-via-the-form-generator</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> <p><strong>Affected:</strong> Packagist: contao/core-bundle</p> <p>### Impact</p> <p>It is possible to inject insert tags via the form generator if the submitted form data is output on the page in a specific way.</p> <p>### Patches</p> <p>Update to Contao 4.13.40 or 5.3.4.</p> <p>### Workarounds</p> <p>Do not output the submitted form data on the website.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/insert-tag-injection-via-the-form-generator</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> https://cve.radiocsirt.org/vuln/ghsa-747v-52c4-8vj8 https://cve.radiocsirt.org/vuln/gsd-2024-28191 gsd-2024-28191 https://cve.radiocsirt.org/vuln/gsd-2024-28191