github.com
https://github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c CVE-2022-1588
RejectedNot in search
Contao 4.13.2 - Cross-Site Scripting (XSS)
Record summary
EIP currently links 1 catalogued exploit to CVE-2022-1588.
Description
Cross-site Scripting (XSS) in GitHub repository contao/contao prior to 4.13.3. Attacker can execute Malicious JS in Application :)
Description source: GitHub Advisory
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBContao 4.13.2 - Cross-Site Scripting (XSS)ExploitDB exploitby Chetanya SharmaNot analyzed1 file
References
3huntr.dev
https://huntr.dev/bounties/df46e285-1b7f-403c-8f6c-8819e42deb80 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-1588