redaxo core
20 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-117538 | < 5.21.0 | REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter | LOW 2.1 | 0.2 % | ||
| CVE-2026-117537 | < 5.21.0 | REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter | LOW 2.1 | 0.2 % | ||
| CVE-2026-117536 | < 5.21.3 | REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation | HIGH 8.6 | 0.1 % | ||
| CVE-2026-117535 | < 5.21.3 | REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-117534 | < 5.21.3 | REDAXO before 5.21.3 CSRF in Article History Plugin | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-117533 | 5.18.0 – < 5.21.4 | REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads | LOW 2.1 | 0.1 % | ||
| CVE-2026-117532 | 5.3.0 – < 5.21.4 | REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin | CRITICAL 9.3 | 0.7 % | ||
| CVE-2026-116900 | < 5.21.4 | REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-116899 | < 5.21.4 | REDAXO before 5.21.4 Broken Access Control in Slice Operations | HIGH 7.1 | 0.2 % | ||
| CVE-2026-116898 | < 5.21.4 | REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move | HIGH 7.1 | 0.2 % | ||
| CVE-2026-116897 | < 5.21.4 | REDAXO before 5.21.4 Missing Authorization in Version and History Previews | HIGH 7.1 | 0.2 % | ||
| CVE-2026-116896 | < 5.21.5 | REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables | HIGH 7.7 | 0.2 % | ||
| CVE-2026-116895 | < 5.21.5 | REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-116894 | < 5.21.5 | REDAXO before 5.21.5 Insufficient Session Expiration on Password Change | LOW 2.3 | 0.2 % | ||
| CVE-2026-116893 | < 5.21.5 | REDAXO core before 5.21.5 Missing Authorization in rex_api_package API | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-63000 | < 5.21.2 | REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-62998 | < 5.21.2 | REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-63002 | < 5.21.2 | REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-63001 | < 5.21.2 | REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()` | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-53599 | >= 5.18.2, < 5.21.1 | Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-exten… | HIGH 7.5 | 0.5 % |