Vulnerabilidades en Redaxo
27 resultadosCVE-2026-117532CRITICALREDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History PluginEPSS 0.7%CVE-2026-21857HIGHRedaxo has Path Traversal in Backup Addon Leading to Arbitrary File ReadEPSS 0.5%CVE-2026-53599HIGHRedaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlersEPSS 0.5%CVE-2018-25353HIGHRedaxo CMS Mediapool Addon 5.5.1 Arbitrary File UploadEPSS 0.5%CVE-2024-13209MEDIUMRedaxo CMS Structure Management Page index.php cross site scriptingEPSS 0.4%CVE-2026-62998MEDIUMREDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column EnumerationEPSS 0.4%CVE-2025-27412MEDIUMREDAXO allows Authenticated Reflected Cross Site Scripting - packages installationEPSS 0.3%CVE-2025-66026MEDIUMREDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types]EPSS 0.3%CVE-2025-27411MEDIUMREDAXO allows Arbitrary File Upload in the mediapool pageEPSS 0.3%CVE-2026-116893MEDIUMREDAXO core before 5.21.5 Missing Authorization in rex_api_package APIEPSS 0.3%CVE-2026-116896HIGHREDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication TablesEPSS 0.2%CVE-2026-116897HIGHREDAXO before 5.21.4 Missing Authorization in Version and History PreviewsEPSS 0.2%CVE-2026-117535MEDIUMREDAXO before 5.21.3 Reflected XSS via opener_link in Media PoolEPSS 0.2%CVE-2026-63002MEDIUMREDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem FilenamesEPSS 0.2%CVE-2026-63001MEDIUMREDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`EPSS 0.2%CVE-2026-116899HIGHREDAXO before 5.21.4 Broken Access Control in Slice OperationsEPSS 0.2%CVE-2026-117538LOWREDAXO before 5.21.0 Reflected XSS via Packages API function ParameterEPSS 0.2%CVE-2026-117537LOWREDAXO before 5.21.0 Reflected XSS via Metainfo API type ParameterEPSS 0.2%CVE-2026-116898HIGHREDAXO before 5.21.4 Missing Authorization in Media Pool Bulk MoveEPSS 0.2%CVE-2026-116894LOWREDAXO before 5.21.5 Insufficient Session Expiration on Password ChangeEPSS 0.2%