medium5.3
CVE-2024-50803
Redaxo Core CMS Cross Site Scripting (XSS)
Impact
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | redaxo/source | < 5.18.0 | 5.18.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redaxo | Redaxo | Version 5.17.1 |