CVE-2019-11512: Contao

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5.

Affected products

• Contao Contao: from 4.0.0, before 4.4.39 (fixed in 4.4.39); from 4.5.0, before 4.7.5 (fixed in 4.7.5)

Published 2019-07-09. Last modified 2026-06-17.