CVE-2019-10642: Contao CMS

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Contao 4.7 allows CSRF.

Affected products

  • Contao Contao CMS: version 4.7.0 only

Published 2019-04-17. Last modified 2026-06-17.