Redaxo core

• CVE-2026-117538 Medium 4.1 REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter 0.2%
• CVE-2026-117537 Medium 4.1 REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter 0.2%
• CVE-2026-117536 High 8.8 REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation 0.1%
• CVE-2026-117535 Medium 6.1 REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool 0.2%
• CVE-2026-117534 Medium 5.4 REDAXO before 5.21.3 CSRF in Article History Plugin <0.1%
• CVE-2026-117533 Medium 4.4 REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads 0.1%
• CVE-2026-117532 Critical 9.8 REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin 0.7%
• CVE-2026-116900 Medium 5.4 REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets 0.1%
• CVE-2026-116899 Medium 6.5 REDAXO before 5.21.4 Broken Access Control in Slice Operations 0.2%
• CVE-2026-116898 High 7.1 REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move 0.2%
• CVE-2026-116897 Medium 6.5 REDAXO before 5.21.4 Missing Authorization in Version and History Previews 0.2%
• CVE-2026-116896 High 7.5 REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables 0.2%
• CVE-2026-116895 Medium 5.4 REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter <0.1%
• CVE-2026-116894 Medium 4.2 REDAXO before 5.21.5 Insufficient Session Expiration on Password Change 0.2%
• CVE-2026-116893 Medium 6.8 REDAXO core before 5.21.5 Missing Authorization in rex_api_package API 0.3%
• CVE-2026-63000 Medium 6.4 REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates 0.1%
• CVE-2026-62998 Medium 4.3 REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration 0.4%
• CVE-2026-63002 Medium 4.8 REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames 0.2%
• CVE-2026-63001 Medium 4.8 REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()` 0.2%
• CVE-2026-53599 High 7.5 Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers 0.5%