Skip to content

CVE record · 1 source

CVE-2026-107845

CVSS 9.3

Contao is an Open Source CMS.

CVSS: 9.3
EPSS: 0.003 (p20)

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 22d ago

Contao is an Open Source CMS.

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor can submit a comment whose email or website metadata is rendered without sufficient attribute and URL encoding by listComments()…

CVSS 9.3 Fix available CVE-2026-107845