UpHeron
All vulnerabilities

Servers and applications

CVE-2024-13209

Stored XSS on REDAXO 5.18.1 - Article / "content/edit"

Severity
Medium 5.1
Published
9 Jan 2025
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
5.18.2
Also known as
GHSA-7wj8-856p-qc9m
Sources
NVD, Project advisories (GitHub)

Description

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the component Structure Management Page. The manipulation of the argument Article Name leads to cross site scripting. It is possible to launch the attack remotely. The…

Affected software

SoftwareAffected versions
REDAXOServers and applications · cpe:a:redaxo:redaxo
  • Version 5.18.1
REDAXOServers and applications · github:redaxo/core
  • From 5.12.0-beta1 before 5.18.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-13209
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-13209
  • GitHub Advisory Database https://github.com/advisories/GHSA-7wj8-856p-qc9m
  • github.com https://github.com/redaxo/core/security/advisories/GHSA-7wj8-856p-qc9m