redaxo/core Security Advisories | GitStock

medium2026-09-24

REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration

GHSA-4f5f-j737-pm58 · CVE-2026-62998

medium2026-09-23

REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates

GHSA-m8r3-22v6-g877 · CVE-2026-63000

medium2026-09-23

REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames

GHSA-w998-qmw9-mf4m · CVE-2026-63002

medium2026-09-23

REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`

GHSA-mf2p-wjp4-99pq · CVE-2026-63001

high2026-07-31

Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers

GHSA-98pp-vccm-qm25 · CVE-2026-53599

low2026-04-10

REDAXO has reflected XSS backend packages API via function parameter (CSRF token required)

GHSA-xq4j-g85q-wf97

low2026-04-10

REDAXO has reflected XSS in backend Metainfo API via type parameter (CSRF token required)

GHSA-m662-8jrj-cw6v