REDAXO CMS core cross-site scripting vulnerability

REDAXO CMS core versions prior to 5.21.4 contain a cross-site scripting vulnerability. This vulnerability stems from a stored XSS flaw, enabling content editors to inject HTML by using unescaped values stored in media, medialist, link, and linklist components. Attackers can submit specially craft...