CVE-2021-35955
CVE-2021-35955
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field. Fixed in 4.4.56, 4.9.18, 4.11.7.
CVSS 5.9 · Medium · EPSS 0.6% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
contao/core-bundle Packagist
- Versions
- 4.0.0
- 4.0.1
- 4.0.2
- 4.0.3
- 4.0.4
- 4.1.0
- 4.1.0-RC1
- 4.1.0-beta1
- 4.1.1
- 4.1.2
- 4.1.3
- 4.2.0
- 4.2.0-RC1
- 4.2.0-beta1
- 4.2.1
- 4.2.2
- 4.2.3
- 4.2.4
- 4.2.5
- 4.3.0
- 4.3.0-RC1
- 4.3.1
- 4.3.10
- 4.3.11
- 4.3.2
- 4.3.3
- 4.3.4
- 4.3.5
- 4.3.6
- 4.3.7
- 4.3.8
- 4.3.9
- 4.4.0
- 4.4.0-RC1
- 4.4.0-RC2
- 4.4.0-beta1
- 4.4.1
- 4.4.10
- 4.4.11
- 4.4.12
- 4.4.13
- 4.4.14
- 4.4.15
- 4.4.16
- 4.4.17
- 4.4.18
- 4.4.19
- 4.4.2
- 4.4.20
- 4.4.21
- 4.4.22
- 4.4.23
- 4.4.24
- 4.4.25
- 4.4.26
- 4.4.27
- 4.4.28
- 4.4.29
- 4.4.3
- 4.4.30
- 4.4.31
- 4.4.32
- 4.4.33
- 4.4.34
- 4.4.35
- 4.4.36
- 4.4.37
- 4.4.38
- 4.4.39
- 4.4.4
- 4.4.40
- 4.4.41
- 4.4.42
- 4.4.43
- 4.4.44
- 4.4.45
- 4.4.46
- 4.4.47
- 4.4.48
- 4.4.49
- 4.4.5
- 4.4.50
- 4.4.51
- 4.4.52
- 4.4.53
- 4.4.54
- 4.4.55
- 4.4.6
- 4.4.7
- 4.4.8
- 4.4.9
- Affected ranges
- ECOSYSTEM: ≥ 4.0.0, < 4.4.56
Update to 4.4.56
contao/contao Packagist
- Versions
- 4.4.22
- 4.4.23
- 4.4.24
- 4.4.25
- 4.4.26
- 4.4.27
- 4.4.28
- 4.4.29
- 4.4.30
- 4.4.31
- 4.4.32
- 4.4.33
- 4.4.34
- 4.4.35
- 4.4.36
- 4.4.37
- 4.4.38
- 4.4.39
- 4.4.40
- 4.4.41
- 4.4.42
- 4.4.43
- 4.4.44
- 4.4.45
- 4.4.46
- 4.4.47
- 4.4.48
- 4.4.49
- 4.4.50
- 4.4.51
- 4.4.52
- 4.4.53
- 4.4.54
- 4.4.55
- Affected ranges
- ECOSYSTEM: ≥ 4.0.0, < 4.4.56
Update to 4.4.56
contao/contao Packagist
- Versions
- 4.5.13
- 4.5.14
- 4.6.0
- 4.6.1
- 4.6.10
- 4.6.11
- 4.6.12
- 4.6.13
- 4.6.14
- 4.6.2
- 4.6.3
- 4.6.4
- 4.6.5
- 4.6.6
- 4.6.7
- 4.6.8
- 4.6.9
- 4.7.0
- 4.7.0-RC1
- 4.7.0-RC2
- 4.7.0-RC3
- 4.7.0-RC4
- 4.7.1
- 4.7.2
- 4.7.3
- 4.7.4
- 4.7.5
- 4.7.6
- 4.7.7
- 4.8.0
- 4.8.0-RC1
- 4.8.0-RC2
- 4.8.1
- 4.8.2
- 4.8.3
- 4.8.4
- 4.8.5
- 4.8.6
- 4.8.7
- 4.8.8
- 4.9.0
- 4.9.0-RC1
- 4.9.0-RC2
- 4.9.1
- 4.9.10
- 4.9.11
- 4.9.12
- 4.9.13
- 4.9.14
- 4.9.15
- 4.9.16
- 4.9.17
- 4.9.2
- 4.9.3
- 4.9.4
- 4.9.5
- 4.9.6
- 4.9.7
- 4.9.8
- 4.9.9
- Affected ranges
- ECOSYSTEM: ≥ 4.5.0, < 4.9.18
Update to 4.9.18
contao/contao Packagist
- Versions
- 4.10.0
- 4.10.1
- 4.10.2
- 4.10.3
- 4.10.4
- 4.10.5
- 4.10.6
- 4.10.7
- 4.11.0
- 4.11.0-RC1
- 4.11.0-RC2
- 4.11.1
- 4.11.2
- 4.11.3
- 4.11.4
- 4.11.5
- 4.11.6
- Affected ranges
- ECOSYSTEM: ≥ 4.10.0, < 4.11.7
Update to 4.11.7
contao/core-bundle Packagist
- Versions
- 4.5.0
- 4.5.1
- 4.5.10
- 4.5.11
- 4.5.12
- 4.5.13
- 4.5.14
- 4.5.2
- 4.5.3
- 4.5.4
- 4.5.5
- 4.5.6
- 4.5.7
- 4.5.8
- 4.5.9
- 4.6.0
- 4.6.0-RC1
- 4.6.0-RC2
- 4.6.0-RC3
- 4.6.1
- 4.6.10
- 4.6.11
- 4.6.12
- 4.6.13
- 4.6.14
- 4.6.2
- 4.6.3
- 4.6.4
- 4.6.5
- 4.6.6
- 4.6.7
- 4.6.8
- 4.6.9
- 4.7.0
- 4.7.0-RC1
- 4.7.0-RC2
- 4.7.0-RC3
- 4.7.0-RC4
- 4.7.1
- 4.7.2
- 4.7.3
- 4.7.4
- 4.7.5
- 4.7.6
- 4.7.7
- 4.8.0
- 4.8.0-RC1
- 4.8.0-RC2
- 4.8.1
- 4.8.2
- 4.8.3
- 4.8.4
- 4.8.5
- 4.8.6
- 4.8.7
- 4.8.8
- 4.9.0
- 4.9.0-RC1
- 4.9.0-RC2
- 4.9.1
- 4.9.10
- 4.9.11
- 4.9.12
- 4.9.13
- 4.9.14
- 4.9.15
- 4.9.16
- 4.9.17
- 4.9.2
- 4.9.3
- 4.9.4
- 4.9.5
- 4.9.6
- 4.9.7
- 4.9.8
- 4.9.9
- Affected ranges
- ECOSYSTEM: ≥ 4.5.0, < 4.9.18
Update to 4.9.18
contao/core-bundle Packagist
- Versions
- 4.10.0
- 4.10.1
- 4.10.2
- 4.10.3
- 4.10.4
- 4.10.5
- 4.10.6
- 4.10.7
- 4.11.0
- 4.11.0-RC1
- 4.11.0-RC2
- 4.11.1
- 4.11.2
- 4.11.3
- 4.11.4
- 4.11.5
- 4.11.6
- Affected ranges
- ECOSYSTEM: ≥ 4.10.0, < 4.11.7
Update to 4.11.7