Vulnerability CVE-2018-5478
Published: 2023-09-21

Description:
Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.

 References:
https://security.snyk.io/vuln/SNYK-PHP-CONTAOCORE-70397
https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2018-5478.yaml
Copyright 2026, cxsecurity.com

 

Back to Top