Already a customer?
Log in now
You would like to become a customer?
Test trakked now
This is a security release! A timely update is strongly recommended!
- Session cookie disclosure in the crawler (CVE-2024-28235)
- Cross site scripting in the file manager (CVE-2024-28190)
- Insert tag injection via the form generator (CVE-2024-28191)
- Remember-me tokens are not cleared after a password change (CVE-2024-30262)
- Insufficient BBCode sanitization (CVE-2024-28234)
Vulnerability details
The full post is only visible for trakked customers
About Contao 5.3 LTS
The first stable version of Contao 5.3 has been released on February 16, 2024, replacing Contao 4.13 as the long term support version. As an LTS version, 5.3 will be provided with bug fixes until February 14, 2027 and security-related updates until February 14, 2028. Contao 5.7 will be the next LTS version of Contao and will be released in February 2026, ensuring a stress-free transition.
