← Database

CVE-2025-29790

MEDIUM CVSS: 5.4 Published: 2025-03-18 Modified: 2026-06-17

Description

Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.

Affected Platforms

Contao Contao

Weakness Type

CWE-79

References