CVE-2022-1588: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

May 5, 2022 (updated May 13, 2022)

Cross-site Scripting (XSS) in GitHub repository contao/contao prior to 4.13.3. Attacker can execute Malicious JS in Application :)

References

github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c
huntr.dev/bounties/df46e285-1b7f-403c-8f6c-8819e42deb80
nvd.nist.gov/vuln/detail/CVE-2022-1588

Code Behaviors & Features

Detect and mitigate CVE-2022-1588 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →