Packagist/redaxo/source CVE-2024-13209: medium 5.4, EPSS 0.40%
Stored XSS in REDAXO
Action: Upgrade redaxo/source to 5.18.2 or later.
composer require redaxo/source:5.18.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.12.0-beta1 | 5.18.2 | - |
Fixed versions
| 5.18.2 |
Sources
- osv: GHSA-7wj8-856p-qc9m
- https://github.com/redaxo/redaxo/security/advisories/GHSA-7wj8-856p-qc9m
- https://nvd.nist.gov/vuln/detail/CVE-2024-13209
- https://github.com/redaxo/redaxo/commit/74d7391571a29a455a0c477973bc25d25710e424
- https://geochen.medium.com/redaxo-cms-5-18-1-cross-site-scripting-7c9a872c72f6
- https://github.com/redaxo/redaxo
CVE-2024-13209 · published · modified · JSON