Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2018-5478

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-mpg7-2rx9-h5qp

Contao Cross-site Scripting vulnerabililty Contao 3.x before 3.5.32 allows Cross-site Scripting (XSS) via the unsubscribe module in the frontend newsletter extension.

gitlab/packagist/contao/core/CVE-2018-5478

XSS vulnerability in the newsletter extension There's a XSS vulnerability is in the "unsubscribe" module of the newsletter extension and it can easily be exploited by anyone in the front end. If you are not using the newsletter extension or the "unsubscribe" module, your installation is not affected by the vulnerability.

gitlab/packagist/contao/newsletter-bundle/CVE-2018-5478

XSS vulnerability in the newsletter extension The vulnerability is in the "unsubscribe" module of the newsletter extension and can easily be exploited by anyone in the front end. If you are not using the newsletter extension or the "unsubscribe" module, your installation is not affected by the vulnerability.