CVE-2024-45612 - Contao Canonical Tag Injection Vulnerability

CVE ID : CVE-2024-45612
Published : Sept. 17, 2024, 7:15 p.m. | 24 minutes ago
Description : Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag, which are then replaced on the web page (front end). Users are advised to update to Contao 4.13.49, 5.3.15 or 5.4.3. Users unable to upgrade should disable canonical tags in the root page settings.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...