<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 23 Oct 2026 23:22:36 +0000</lastBuildDate>
    <item>
      <title>EUVD-2026-45794</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-45794</link>
      <description>EUVD-2026-45794</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-45794</guid>
    </item>
    <item>
      <title>fkie_cve-2020-25768</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2020-25768</link>
      <description>&lt;p&gt;Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in front end forms which will be replaced when the page is rendered.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in front end forms which will be replaced when the page is rendered.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2020-25768</guid>
    </item>
    <item>
      <title>GHSA-f7wm-x4gw-6m23 — Contao Insert tag injection in forms</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-f7wm-x4gw-6m23</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: contao/core-bundle, Packagist: contao/contao&lt;/p&gt;
&lt;p&gt;### Impact&lt;/p&gt;
&lt;p&gt;It is possible to inject insert tags in front end forms which will be replaced when the page is rendered.&lt;/p&gt;
&lt;p&gt;### Patches&lt;/p&gt;
&lt;p&gt;Update to Contao 4.4.52, 4.9.6 or 4.10.1.&lt;/p&gt;
&lt;p&gt;### Workarounds&lt;/p&gt;
&lt;p&gt;Disable the front end login form and do not use form fields with array keys such as `fieldname[]`.&lt;/p&gt;
&lt;p&gt;### References&lt;/p&gt;
&lt;p&gt;https://contao.org/en/security-advisories/insert-tag-injection-in-forms&lt;/p&gt;
&lt;p&gt;### For more information&lt;/p&gt;
&lt;p&gt;If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: contao/core-bundle, Packagist: contao/contao&lt;/p&gt;
&lt;p&gt;### Impact&lt;/p&gt;
&lt;p&gt;It is possible to inject insert tags in front end forms which will be replaced when the page is rendered.&lt;/p&gt;
&lt;p&gt;### Patches&lt;/p&gt;
&lt;p&gt;Update to Contao 4.4.52, 4.9.6 or 4.10.1.&lt;/p&gt;
&lt;p&gt;### Workarounds&lt;/p&gt;
&lt;p&gt;Disable the front end login form and do not use form fields with array keys such as `fieldname[]`.&lt;/p&gt;
&lt;p&gt;### References&lt;/p&gt;
&lt;p&gt;https://contao.org/en/security-advisories/insert-tag-injection-in-forms&lt;/p&gt;
&lt;p&gt;### For more information&lt;/p&gt;
&lt;p&gt;If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-f7wm-x4gw-6m23</guid>
    </item>
    <item>
      <title>gsd-2020-25768</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2020-25768</link>
      <description>gsd-2020-25768</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2020-25768</guid>
    </item>
  </channel>
</rss>
