logo

Database

Reflected cross-site scripting (XSS) In redaxo/source

Description

Redaxo Core CMS Cross Site Scripting (XSS) The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2024-508032. NVD-2024-508033. OSV-2024-508034. GCVE-2024-50803

References

1. https://github.com/Praison001/CVE-2024-50803-Redaxo2. https://medium.com/@praison66/redaxo-cve-2024-50803-5d15a3cd054d3. http://redaxo.com4. https://github.com/GraySignal/CVE-2024-50803-Redaxo

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.