Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, it is possible to inject CSS styles via BBCode in comments. Installations are only affected if BBCode is enabled. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable BBCode for comments.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-04-09T13:59:41.300Z
Updated: 2024-06-04T18:03:38.950Z
Reserved: 2024-03-07T14:33:30.034Z
Link: CVE-2024-28234
JSON object: View
NVD Information
Status : Awaiting Analysis
Published: 2024-04-09T14:15:08.897
Modified: 2024-04-10T13:24:22.187
Link: CVE-2024-28234
JSON object: View
Redhat Information
No data.
CWE