https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 09:12:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4484 EUVD-2026-4484 https://cve.radiocsirt.org/vuln/euvd-2026-4484 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28234 <p>Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, it is possible to inject CSS styles via BBCode in comments. Installations are only affected if BBCode is enabled. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable BBCode for comments.</p> <p>Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, it is possible to inject CSS styles via BBCode in comments. Installations are only affected if BBCode is enabled. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable BBCode for comments.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28234 https://cve.radiocsirt.org/vuln/ghsa-j55w-hjpj-825g <p><strong>Affected:</strong> Packagist: contao/comments-bundle</p> <p>### Impact</p> <p>If BBCode is enabled for comments, users can inject CSS styles.</p> <p>### Patches</p> <p>Update to Contao 4.13.40 or 5.3.4.</p> <p>### Workarounds</p> <p>Disable BBCode for comments.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/insufficient-bbcode-sanitization</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> <p><strong>Affected:</strong> Packagist: contao/comments-bundle</p> <p>### Impact</p> <p>If BBCode is enabled for comments, users can inject CSS styles.</p> <p>### Patches</p> <p>Update to Contao 4.13.40 or 5.3.4.</p> <p>### Workarounds</p> <p>Disable BBCode for comments.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/insufficient-bbcode-sanitization</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> https://cve.radiocsirt.org/vuln/ghsa-j55w-hjpj-825g https://cve.radiocsirt.org/vuln/gsd-2024-28234 gsd-2024-28234 https://cve.radiocsirt.org/vuln/gsd-2024-28234