Description
REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by storing unescaped values rendered by media, medialist, link and linklist widgets. Attackers can submit crafted REX_INPUT_MEDIA or REX_INPUT_LINK values that break out of the value attribute, executing script in administrators' backend sessions to hijack accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| redaxo | core | < 5.21.4 | 5.21.4 |
References
- GitHub Security Advisory (GHSA-5wmj-5x79-rr87) vendor-advisory
- VulnCheck Advisory: REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets third-party-advisory