Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject code into the tl_log table that will be executed in the browser when the system log is called in the back end.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Contao 跨站脚本漏洞
Vulnerability Description
Contao是一套采用PHP开发的开源内容管理系统（CMS）。该系统支持搜索引擎、权限管理和CSS框架等。 Contao 存在跨站脚本漏洞，攻击者可以将代码注入到 tl_log 表中，这些代码将在后端调用系统日志时在浏览器中被执行。以下产品和版本受到影响：4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5。
CVSS Information
N/A
Vulnerability Type
N/A