redaxo/source vulnerabilities

CVEs whose affected-version data names the redaxo/source package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-53599High· 7.5

1mo ago

REDAXO is a PHP-based content management system

REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with media[upload] permission upload a JPEG/…

▾ Twilightredaxo · redaxo/sourceEPSS 0.40%via NVD