Redaxo redaxo

• CVE-2026-21857 High 8.3 Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read 0.5%
• CVE-2025-66026 Medium 6.1 REDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types] 0.3%
• CVE-2025-27412 Medium 6.1 REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation 0.3%
• CVE-2025-27411 Medium 5.4 REDAXO allows Arbitrary File Upload in the mediapool page 0.3%