Stored Cross-Site Scripting Vulnerability in REDAXO CMS v5.17.1
CVE-2024-46209

Currently unrated

Key Information:

Vendor

REDAXO

Status
REDAXO CMS
Vendor
CVE Published:
6 January 2025

What is CVE-2024-46209?

A stored cross-site scripting vulnerability exists in the REDAXO CMS version 5.17.1 that enables attackers to inject malicious scripts through the crafted payload in the password parameter. This vulnerability can lead to unauthorized script execution in the context of the affected user, compromising session tokens and enabling the attacker to manipulate web content. Proper validation and sanitization of user inputs are crucial to mitigate this risk.

References

https://github.com/h4ckr4v3n/CVE-2024-46209/blob/main/RED...
https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git

Timeline

  • Vulnerability published

.