redaxo core

4 known vulnerabilities in redaxo core, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-63002 CVSS 4.8 medium REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in…
  • CVE-2026-63001 CVSS 4.8 medium REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in…
  • CVE-2026-63000 CVSS 6.4 medium REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in…
  • CVE-2026-62998 CVSS 4.3 medium REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.php accepts the…