Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2022-24899

Cross site scripting via canonical tag

Description

Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

contao contao

  • < 4.13.3affected

References