CVE-2024-46209

Medium CVSS: 5.4

A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter.

Vendor

Redaxo

Product

Redaxo

CWE

CWE-79

Yayın Tarihi

2025-01-06 19:15:12

Güncelleme

2025-06-13 18:29:47

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-79 Redaxo MEDIUM Redaxo 2025

Referanslar

https://github.com/h4ckr4v3n/CVE-2024-46209/blob/main/REDAXO%20Stored%20XSS%20%2B%20RCE.pdf https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git

Benzer Kayıtlar

High

CVE-2026-21857

REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions ca…

Medium

CVE-2025-66026

REDAXO is a PHP-based CMS. Prior to version 5.20.1, a reflected Cross-Site Scripting (XSS) vulnerability exists in the M…

Medium

CVE-2025-64049

A stored cross-site scripting (XSS) vulnerability in the module management component in REDAXO CMS 5.20.0 allows remote…

High

CVE-2025-64050

A Remote Code Execution (RCE) vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote auth…

Medium

CVE-2025-27411

REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. Thi…

Medium

CVE-2025-27412

REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected…