216.73.217.126

CVE-2025-29790

· Published 18/03/2025 19:15 · Modified 18/03/2025 19:15

Labels: CVE-2025-29790 2025-03-18CVE-2025-29790CWE-79[email protected]

Essential information

Published
18/03/2025 19:15
Modified
18/03/2025 19:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
contao / contao cpe:2.3:a:contao:contao:*:*:*:*:*:*:*:*

References