pkg:Packagist/redaxo/source

All known vulnerabilities

• HIGH7.2CVE-2025-64050REDAXO CMS is vulnerable to RCE attack through its template management component
  from 0, < 5.20.1
• HIGH7.2CVE-2024-25298Code injection in REDAXO
  from 0, <= 5.15.1
• MEDIUM6.1CVE-2025-66026REDAXO CMS is vulnerable to Reflected XSS in Mediapool Info Banner via args[types]
  from 0, < 5.20.1
• MEDIUM6.1REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation
  >= 5.0.0, < 5.18.3
• MEDIUM5.4REDAXO allows Arbitrary File Upload in the mediapool page
  from 0, < 5.18.3
• MEDIUM5.4Stored XSS in REDAXO
  >= 5.12.0-beta1, < 5.18.2
• MEDIUM4.9Path traversal in redaxo
  from 0, <= 5.17.1
• MEDIUM4.8REDAXO CMS is vulnerable to XSS through its module management component
  from 0, < 5.20.1
• —Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
  from 0, < 5.20.2
• —REDAXO CMS Cross-site Scripting vulnerability
  from 0, <= 5.17.1
• —Redaxo Core CMS Cross Site Scripting (XSS)
  from 0, < 5.18.0