Design/Logic Flaw

2020-03-1615:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

33.8%

JSON

Contao before 4.5.7 has XSS in the system log.

CPENameOperatorVersion
contaoge4.5.0
contaole4.5.6
contaoge4.4.0
contaole4.4.16
contaoeq4.0.0
contaoeq4.1.0
contaoeq4.2.0
contaoeq4.3.0
contaoge3.0.0
contaole3.5.33

Name	Operator	Version
contao	ge	4.5.0
contao	le	4.5.6
contao	ge	4.4.0
contao	le	4.4.16
contao	eq	4.0.0
contao	eq	4.1.0
contao	eq	4.2.0
contao	eq	4.3.0
contao	ge	3.0.0
contao	le	3.5.33

References

contao.org/en/security-advisories/cross-site-scripting-in-the-system-log.html

0.001 Low

EPSS

Percentile

33.8%

JSON

Related for PRION:CVE-2018-10125