Lucene search
PRIOn knowledge basePRION:CVE-2022-24899HistoryMay 06, 2022 - 12:15 a.m.
Code injection
2022-05-0600:15:00
PRIOn knowledge base
www.prio-n.com
3
0.003 Low
EPSS
Percentile
71.6%
Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings.
Related
osv
osv
CVE-2022-24899
2022-05-06 00:15:07
Cross site scripting via canonical tag in Contao
2022-05-20 19:54:56
friendsofphp
friendsofphp
Cross site scripting via canonical URL
2022-05-05 06:38:47
Cross site scripting via canonical URL
2022-05-05 06:38:47
nvd
nvd
CVE-2022-24899
2022-05-06 00:15:07
github
github
Cross site scripting via canonical tag in Contao
2022-05-20 19:54:56
huntr
huntr
Cross-site Scripting (XSS)
2022-04-28 10:33:33
veracode
veracode
Cross-site Scripting (XSS)
2022-05-09 05:19:32
contao
contao
Cross site scripting via canonical URL
2022-05-05 00:00:00
nuclei
nuclei
Contao <4.13.3 - Cross-Site Scripting
2022-06-18 18:50:43
cve
cve
CVE-2022-24899
2022-05-06 00:15:07
cvelist
cvelist
CVE-2022-24899 Cross site scripting via canonical tag
2022-05-05 23:45:13