Stored Cross-site Scripting (XSS)

redaxo/source is vulnerable to Stored cross-site scripting XSS. The vulnerability is due to improper input validation in the /media/test.html component, allowing attackers to inject malicious scripts into the password parameter...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

REDAXO 安全漏洞

REDAXO is a content management system from REDAXO open source. A security vulnerability exists in REDAXO v5.17.1, which originates from an arbitrary file upload in the MediaPool module, allowing an attacker to execute arbitrary code by uploading a crafted file...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

PT-2025-2732 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: Redaxo CMS version 5.17.1 Description: An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For Redaxo CMS version 5.17.1,...

CVE-2024-46210

CVE-2024-46210 describes an arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 that can allow attackers to execute arbitrary code via uploading a crafted file. Documents consistently identify the affected component as the MediaPool module and the target version as R...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

GHSA-MFX6-JVW8-53FM Duplicate Advisory: Stored XSS in REDAXO

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7wj8-856p-qc9m. This link is maintained to preserve external references. Original Description A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown functio...

Duplicate Advisory: Stored XSS in REDAXO

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7wj8-856p-qc9m. This link is maintained to preserve external references. Original Description A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown functio...

CVE-2024-13209

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...

CVE-2024-13209

The CVE describes a cross-site scripting (XSS) vulnerability in Redaxo CMS 5.18.1. Affected is an unknown function in /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the Structure Management Page; manipulating the Article Name argument can be exploited...

CVE-2024-13209 Redaxo CMS Structure Management Page index.php cross site scripting

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...

CVE-2024-13209 Redaxo CMS Structure Management Page index.php cross site scripting

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...

CVE-2024-13209 Redaxo CMS Structure Management Page index.php cross site scripting

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...

PT-2025-2065 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: Redaxo CMS version 5.18.1 Description: A vulnerability was found in the Structure Management Page component of Redaxo CMS, affecting an unknown function of the file /index.php?page=structure&category id=1&article id=1&clang=1&function=edit...

REDAXO 代码注入漏洞

REDAXO is REDAXO open source a content management system . REDAXO 5.18.1 version of the existence of code injection vulnerability , the vulnerability stems from the file / index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of Article Name parameter can lead to...

GHSA-2P95-8XVM-2PJX REDAXO CMS Cross-site Scripting vulnerability

A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...

REDAXO CMS Cross-site Scripting vulnerability

A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...

CVE-2024-46209

A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...