Description contao prior to 2.11.4 has a sql injection vulnerability Remediation References CVE-2012-4383 Related Vulnerabilities WordPress Plugin HashThemes Demo Importer Security Bypass (1.1.1) axios Improper Input Validation Vulnerability (CVE-2019-10742) WordPress Plugin Jock on air now Cross-Site Scripting (5.6.2) WordPress Plugin Allow REL= and HTML in Author Bios Cross-Site Scripting (.1) WordPress Plugin Print-O-Matic Cross-Site Scripting (2.1.7) Severity High Classification CVE-2012-4383 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities