CVE-2023-36806

Contao is an open source content management system. Starting in version 4.0.0 and prior to versions 4.9.42, 4.13.28, and 5.1.10, it is possible for untrusted backend users to inject malicious code into headline fields in the back end, which will be executed both in the element preview (back end) and on the website (front end). Installations are only affected if there are untrusted back end users who have the rights to modify headline fields, or other fields using the input unit widget. Contao 4.9.42, 4.13.28, and 5.1.10 have a patch for this issue. As a workaround, disable the login for all untrusted back end users.

• CWE-79
• CWE-79

• https://github.com/contao/contao/commit/5c9aff32cfc1f7dc452a045862ac2f86a6b9b4b4Patch
• https://github.com/contao/contao/commit/c98585d36baa25fda69c062421e7e7eadc53c82bPatch
• https://github.com/contao/contao/commit/ccb64c777eb0f9c0e6490c9135d80e915d37cd32Patch
• https://github.com/contao/contao/security/advisories/GHSA-4gpr-p634-922xVendor Advisory
• https://herolab.usd.de/security-advisories/usd-2023-0020/Exploit, Third Party Advisory
• https://github.com/contao/contao/commit/5c9aff32cfc1f7dc452a045862ac2f86a6b9b4b4Patch
• https://github.com/contao/contao/commit/c98585d36baa25fda69c062421e7e7eadc53c82bPatch
• https://github.com/contao/contao/commit/ccb64c777eb0f9c0e6490c9135d80e915d37cd32Patch
• https://github.com/contao/contao/security/advisories/GHSA-4gpr-p634-922xVendor Advisory
• https://herolab.usd.de/security-advisories/usd-2023-0020/Exploit, Third Party Advisory

Published

Jul 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36800Dynamics Finance and Operations Cross-site Scripting Vulnera…5.4
• CVE-2023-36801DHCP Server Service Information Disclosure Vulnerability5.3
• CVE-2023-36802Microsoft Streaming Service Proxy Elevation of Privilege Vul…7.8
• CVE-2023-36803Windows Kernel Information Disclosure Vulnerability5.5
• CVE-2023-36804Windows GDI Elevation of Privilege Vulnerability7.8
• CVE-2023-36805Windows MSHTML Platform Security Feature Bypass Vulnerabilit…7
• CVE-2023-36807pypdf is a pure-python PDF library capable of splitting, mer…6.5
• CVE-2023-36808GLPI is a free asset and IT management software package. Sta…9.8
• CVE-2023-36809Kiwi TCMS, an open source test management system allows user…5.4
• CVE-2023-3681A vulnerability classified as problematic was found in Campc…6.1
• CVE-2023-36810pypdf is a pure-python PDF library capable of splitting, mer…6.5
• CVE-2023-36811borgbackup is an opensource, deduplicating archiver with com…4.7