REDAXO CMS core cross-site scripting vulnerability

REDAXO CMS versions prior to core 5.21.0 contain a cross-site scripting vulnerability. This flaw arises because the function parameter in the backend package API is concatenated into error messages that lack proper HTML escaping. As a result, it may lead to reflected cross-site scripting attacks...