Description
Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings.
Remediation
References
Related Vulnerabilities
WordPress Plugin DM Albums Multiple File Deletion Vulnerabilities (2.1)
WordPress Plugin WP Design Maps & Places Cross-Site Scripting (1.2)
Oracle Database Server CVE-2011-0880 Vulnerability (CVE-2011-0880)
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (7.1.13)