contao
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 86 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 20, 2011 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Contao before 5.3.54, 5.7.17, and 6.0.6 Session Invalidation Failure on 2FA Change
Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Path Traversal via Image Insert Tag
Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Path Traversal via Image Insert Tag
Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Filemount Bypass via Edit-Multiple
Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Filemount Bypass via Edit-Multiple
Exposure of sensitive information through a stale search index (see GHSA-x2rp-9qf7-2fmq)
Unrestricted activation email resending (see GHSA-mfxh-vp55-7gc6)
Path traversal in the images controller (see GHSA-mrvp-7wmx-5m4h)
Cross-site scripting in the comments bundle (see GHSA-628f-v4f6-p37r)
Monitor contao in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.