Vulnerabilities in redaxo
8 resultsVexday analysis
Redaxo apresenta um perfil de risco baixo com apenas 4 vulnerabilidades registradas, nenhuma sob ataque ativo ou classificada como crítica. A fraqueza dominante é XSS (CWE-79), típica em aplicações web, mas sem evidência de exploração em campo e sem novas descobertas nos últimos 90 dias.
CVE-2026-21857HIGHRedaxo has Path Traversal in Backup Addon Leading to Arbitrary File ReadEPSS 0.5%CVE-2018-25353HIGHRedaxo CMS Mediapool Addon 5.5.1 Arbitrary File UploadEPSS 0.5%CVE-2024-13209MEDIUMRedaxo CMS Structure Management Page index.php cross site scriptingEPSS 0.4%CVE-2026-53599HIGHRedaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlersEPSS 0.3%CVE-2025-27412MEDIUMREDAXO allows Authenticated Reflected Cross Site Scripting - packages installationEPSS 0.3%CVE-2025-27411MEDIUMREDAXO allows Arbitrary File Upload in the mediapool pageEPSS 0.3%CVE-2025-66026MEDIUMREDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types]EPSS 0.3%CVE-2016-20053MEDIUMRedaxo CMS 5.2 Cross-Site Request Forgery via users endpointEPSS 0.1%