CVE-2025-65960

MediumCVSS 6.6/10Last modified Oct 18, 2026

Description

Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before 5.3.42, and before 5.6.5, back end users with precise control over the contents of template closures can execute arbitrary PHP functions that do not have required parameters. This issue has been patched in versions 4.13.57, 5.3.42, and 5.6.5. A workaround for this issue involves manually patching the Contao\Template::once() method.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-351

Affected software

No affected versions have been published.

Timeline

Published: Nov 25, 2025
Last modified: Oct 18, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-659614.8Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before 5.3.42, and before 5.6.5, it is possible to inject code into the CVE-2025-659624.3Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior CVE-2025-659635.4Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization check CVE-2025-659648.8n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through CVE-2025-659658.2Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting v CVE-2025-659668.1OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts thro CVE-2025-65970.0Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php. This is CVE-2025-65997.5An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could CVE-2025-659956.5When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs CVE-2025-659987.5Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though this is not the defa CVE-2025-66004.3An exposure of sensitive information vulnerability was identified in GitHub Enterprise Server that could allow an attacker to disclose the n CVE-2025-660007.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker co