CVE-2017-16558
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.
- Update to 4.4.8
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for contao/listing-bundle in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.
Check your installed stack and versions against the current vulnerability feeds.