We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-46209



Description

A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter.

Reserved 2024-09-11 | Published 2025-01-06 | Updated 2025-01-07 | Assigner mitre

References

github.com/h4ckr4v3n/research_redaxo_5_17_1.git

github.com/...24-46209/blob/main/REDAXO Stored XSS + RCE.pdf

cve.org (CVE-2024-46209)

nvd.nist.gov (CVE-2024-46209)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-46209

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.