PT-2022-13985 · Contao · Contao

Published 2022-05-05 · Updated 2022-06-03 · CVE-2022-1588

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions contao/contao versions prior to 4.13.3

Description The issue is related to Cross-site Scripting (XSS) in the contao/contao GitHub repository. An attacker can execute malicious JavaScript in the application.

Recommendations For versions prior to 4.13.3, update to version 4.13.3 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Exploit

Related Identifiers

CVE-2022-1588

Affected Products

Contao

References · 7

• 🔥 https://huntr.dev/bounties/df46e285-1b7f-403c-8f6c-8819e42deb80 · Exploit
• 🔥 https://exploit-db.com/exploits/50945 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1588 · Security Note
• https://t.me/defcon_news/99582 · Telegram Post
• https://t.me/cvenotify/29708 · Telegram Post
• https://t.me/cibsecurity/41965 · Telegram Post
• https://t.me/cvenotify/29710 · Telegram Post