Back to search
CVE-2025-29790
Published: Mar 18, 2025
Modified: Mar 18, 2025
PUBLISHED
Description
Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.
| Vendor | Product | Versions |
|---|---|---|
contao | contao | affected >= 4.0.0, < 4.13.54affected >= 5.0.0, < 5.3.30affected >= 5.4.0, < 5.5.6 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now