We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Contao 5.4.1 allows an authenticated admin account to upload a SVG file containing malicious javascript code into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting (XSS) attack or execute arbitrary code via a crafted javascript to the target.
Reserved 2024-09-11 | Published 2024-10-02 | Updated 2024-10-02 | Assigner mitregrimthereaperteam.medium.com/...load-xss-in-svg-30edb8820ecb
Support options
