2 matches found
CVE-2025-27412
REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting XSS on the page of AddOns. This vulnerability is fixed in 5.18.3...
6.1CVSS0.00287EPSS
SaveExploits1References4
CVE-2025-27412: Improper Neutralization of Input During Web Page Generation
REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting XSS on the page of AddOns. This vulnerability is fixed in 5.18.3...
6.1CVSS5.7AI score0.00287EPSS
SaveExploits1References1
20