Packagist/redaxo/source: low

REDAXO has reflected XSS backend packages API via function parameter (CSRF token required)

Action: Upgrade redaxo/source to 5.21.0 or later.

composer require redaxo/source:5.21.0

Affected

Fixed versions

Sources

• osv: GHSA-xq4j-g85q-wf97
• https://github.com/redaxo/core/security/advisories/GHSA-xq4j-g85q-wf97
• https://github.com/redaxo/core
• https://github.com/redaxo/core/releases/tag/5.21.0

published 2026-04-10T19:40:42Z · modified 2026-04-10T19:49:39.034910Z · JSON