Packagist/contao/core CVE-2018-10125: medium 6.1, EPSS 0.84%

Cross-site Scripting in Contao

Action: Upgrade contao/core to 3.5.35 or later.

composer require contao/core:3.5.35

Affected

Fixed versions

Sources

• osv: GHSA-pj4j-287j-f742#Packagist/contao/core
• https://nvd.nist.gov/vuln/detail/CVE-2018-10125
• https://contao.org/en/news/contao-3_5_35.html
• https://contao.org/en/news/contao-4_4_18.html
• https://contao.org/en/security-advisories/cross-site-scripting-in-the-system-log.html
• https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2018-10125.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2018-10125.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2018-10125.yaml

CVE-2018-10125 · published 2022-02-10T20:49:48Z · modified 2024-02-16T08:14:04.123039Z · JSON