What’s Vulnerable › Vulnerabilities

CVE-2018-10125

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-16 · updated 2026-06-17
• Weakness: CWE-79

Description

Contao before 4.5.7 has XSS in the system log.

Affected products

• contao: from 3.0.0 through 3.5.33; from 4.4.0 through 4.4.16; from 4.5.0 through 4.5.6; 4.0.0, 4.1.0, 4.2.0, 4.3.0

References

• https://contao.org/en/security-advisories/cross-site-scripting-in-the-system-log.html
• https://contao.org/en/security-advisories/cross-site-scripting-in-the-system-log.html

Get alerted when CVE-2018-10125 or the next vulnerability affects your stack