CVE-2025-29790
18.03.2025, 19:15
Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.
| Vendor | Product | Version |
|---|---|---|
| contao | contao | 4.0.0 ≤ 𝑥 < 4.13.53 |
| contao | contao | 5.0.0 ≤ 𝑥 < 5.3.30 |
| contao | contao | 5.4.0 ≤ 𝑥 < 5.5.6 |
𝑥
= Vulnerable software versions