Lucene search
GoogleOSV:CVE-2022-24899HistoryMay 06, 2022 - 12:15 a.m.
CVE-2022-24899
2022-05-0600:15:07
Google
osv.dev
4
Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings.
Related
friendsofphp
friendsofphp
Cross site scripting via canonical URL
2022-05-05 06:38:47
Cross site scripting via canonical URL
2022-05-05 06:38:47
nvd
nvd
CVE-2022-24899
2022-05-06 00:15:07
prion
prion
Code injection
2022-05-06 00:15:00
cvelist
cvelist
CVE-2022-24899 Cross site scripting via canonical tag
2022-05-05 23:45:13
github
github
Cross site scripting via canonical tag in Contao
2022-05-20 19:54:56
huntr
huntr
Cross-site Scripting (XSS)
2022-04-28 10:33:33
veracode
veracode
Cross-site Scripting (XSS)
2022-05-09 05:19:32
osv
osv
Cross site scripting via canonical tag in Contao
2022-05-20 19:54:56
contao
contao
Cross site scripting via canonical URL
2022-05-05 00:00:00
nuclei
nuclei
Contao <4.13.3 - Cross-Site Scripting
2022-06-18 18:50:43
cve
cve
CVE-2022-24899
2022-05-06 00:15:07