Skip to content
OpenAdvisories

Package · Packagist

redaxo/source

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-21857 Public exploit

    Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

    REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions can read arbitrary files within the webroot via path traversal in the Backup addon's file export functionality. The Backup addon does not val…

    redaxo redaxo redaxo/source Packagist
  • Medium 5.4
    CVE-2024-46209 Public exploit

    REDAXO CMS Cross-site Scripting vulnerability

    A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter.

    redaxo/source Packagist
  • Medium 6.1
    CVE-2024-50803 Public exploit

    Redaxo Core CMS Cross Site Scripting (XSS)

    The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges

    redaxo/source Packagist