VULNERABILITY INTELLIGENCE

CVE-2019-19714

CVSS score5.3 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2019-12-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of Output. It is possible to inject insert tags into the login module which will be replaced when the page is rendered.

Weakness classification

  • nvd@nist.gov: CWE-116

Primary references