contao

Friday, October 9

• GitHub CVE-2026-107845
  Contao: Cross-site scripting in the comments bundle

  • contao contao
  • Critical
  • CVSS 9.3
  • EPSS 0.27%
  • Fixed version listed
  20:53 UTC