Security Advisories - contao/core - Packagist

contao/core Security Advisories for 3.5.32 (2)

Existing sessions are not correctly invalidated when a user changes their password

CVE-2019-10641

Affected version: >=3.0.0,<3.5.39

Reported by:
FriendsOfPHP/security-advisories
Cross-site scripting (XSS) vulnerability in the system log of the back end

CVE-2018-10125

Affected version: >=3.0.0,<3.5.35

Reported by:
FriendsOfPHP/security-advisories