CVE List

CVE-2018-5478

Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.

Published September 21, 2023.

Affected software

Get alerts for Contao Contao

Reference links