Skip to content

CVE record · 1 source

CVE-2026-107848

CVSS 3.5

Contao is an Open Source CMS.

CVSS: 3.5

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 22d ago

Contao is an Open Source CMS.

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUEST_TOKEN only for POST requests, while the declarative GET guard runs only when an act parameter is present. Backend…

CVSS 3.5 Fix available CVE-2026-107848