CVE-2017-16558

Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-04-25

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Contao Cms (Contao)

References

• https://contao.org/de/changelog/versions/4.4.html
• https://contao.org/en/news/contao-4_4_8.html