CVE-2024-47069: Contao Unvalidated Locale Xss

A locale parameter passed to a controller action is assigned directly to a template property (e.g., `language`, `locale`, `lang`) without validation. This can lead to Reflected Cross-Site Scripting (XSS) when the property is rendered in an HTML template (like in a `lang` attribute). Ensure that the locale is validated using `\Contao\Validator::isLocale()` be

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0PHP^β