{"schema_version":1,"title":"REDAXO CMS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in REDAXO CMS: 4 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-63002, was published on 23 September 2026.","url":"https://junglewise.ai/threats/technologies/redaxo","json_url":"https://junglewise.ai/threats/technologies/redaxo.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/redaxo","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":8,"critical":0,"exploited":0,"last_7_days":4,"last_30_days":4,"last_90_days":5,"last_365_days":8},"latest":[{"cve":"CVE-2026-63002","cvss":4.8,"epss":0.0018,"slug":"cve-2026-63002-redaxo-stored-xss-in-mediapool-sync-page-via-unescaped-filenames","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in $diff","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.77+00:00","url":"https://junglewise.ai/threats/cve-2026-63002-redaxo-stored-xss-in-mediapool-sync-page-via-unescaped-filenames"},{"cve":"CVE-2026-63001","cvss":4.8,"epss":0.0018,"slug":"cve-2026-63001-redaxo-media-manager-stored-xss-in-type-name","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_manager/lib/media_ma","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.617+00:00","url":"https://junglewise.ai/threats/cve-2026-63001-redaxo-media-manager-stored-xss-in-type-name"},{"cve":"CVE-2026-63000","cvss":6.4,"epss":0.0013,"slug":"cve-2026-63000-redaxo-missing-csrf-protection-on-package-update","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/install/lib/api/api_pa","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.453+00:00","url":"https://junglewise.ai/threats/cve-2026-63000-redaxo-missing-csrf-protection-on-package-update"},{"cve":"CVE-2026-62998","cvss":4.3,"epss":0.0027,"slug":"cve-2026-62998-redaxo-rex-list-unwhitelisted-order-by-column-injection","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.php accepts the sort","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.293+00:00","url":"https://junglewise.ai/threats/cve-2026-62998-redaxo-rex-list-unwhitelisted-order-by-column-injection"},{"cve":"CVE-2026-53599","cvss":7.5,"epss":0.0051,"slug":"cve-2026-53599-redaxo-cms-authenticated-rce-via-multi-extension-upload-bypass","title":"REDAXO CMS authenticated RCE via multi-extension upload bypass","severity":"high","exploited":false,"published_at":"2026-07-31T20:16:51.847+00:00","url":"https://junglewise.ai/threats/cve-2026-53599-redaxo-cms-authenticated-rce-via-multi-extension-upload-bypass"},{"cve":"CVE-2018-25353","cvss":8.8,"epss":0.0006,"slug":"cve-2018-25353-redaxo-cms-mediapool-addon-arbitrary-file-upload","title":"Redaxo CMS Mediapool Addon arbitrary file upload","severity":"high","exploited":false,"published_at":"2026-05-23T19:16:55.51+00:00","url":"https://junglewise.ai/threats/cve-2018-25353-redaxo-cms-mediapool-addon-arbitrary-file-upload"},{"cvss":2.1,"slug":"redaxo-reflected-xss-in-backend-packages-api-9ebf14f6","title":"REDAXO reflected XSS in backend packages API","severity":"low","exploited":false,"published_at":"2026-04-10T19:40:42+00:00","url":"https://junglewise.ai/threats/redaxo-reflected-xss-in-backend-packages-api-9ebf14f6"},{"cvss":2.1,"slug":"redaxo-cms-reflected-xss-in-backend-metainfo-api-7d05c138","title":"REDAXO CMS reflected XSS in backend Metainfo API","severity":"low","exploited":false,"published_at":"2026-04-10T19:40:23+00:00","url":"https://junglewise.ai/threats/redaxo-cms-reflected-xss-in-backend-metainfo-api-7d05c138"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":4}],"related":[],"technology":{"hub":true,"name":"REDAXO CMS","slug":"redaxo","vendor":{"name":"REDAXO","slug":"redaxo","url":"https://junglewise.ai/threats/vendors/redaxo"},"aliases":["redaxo-cms"],"category":"cms","homepage":"https://redaxo.org/","repo_url":"https://github.com/redaxo/redaxo","description":"REDAXO is an open-source content management system based on PHP and MySQL.","url":"https://junglewise.ai/threats/technologies/redaxo"},"most_severe":[{"cve":"CVE-2018-25353","cvss":8.8,"epss":0.0006,"slug":"cve-2018-25353-redaxo-cms-mediapool-addon-arbitrary-file-upload","title":"Redaxo CMS Mediapool Addon arbitrary file upload","severity":"high","exploited":false,"published_at":"2026-05-23T19:16:55.51+00:00","url":"https://junglewise.ai/threats/cve-2018-25353-redaxo-cms-mediapool-addon-arbitrary-file-upload"},{"cve":"CVE-2026-53599","cvss":7.5,"epss":0.0051,"slug":"cve-2026-53599-redaxo-cms-authenticated-rce-via-multi-extension-upload-bypass","title":"REDAXO CMS authenticated RCE via multi-extension upload bypass","severity":"high","exploited":false,"published_at":"2026-07-31T20:16:51.847+00:00","url":"https://junglewise.ai/threats/cve-2026-53599-redaxo-cms-authenticated-rce-via-multi-extension-upload-bypass"},{"cve":"CVE-2026-63000","cvss":6.4,"epss":0.0013,"slug":"cve-2026-63000-redaxo-missing-csrf-protection-on-package-update","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/install/lib/api/api_pa","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.453+00:00","url":"https://junglewise.ai/threats/cve-2026-63000-redaxo-missing-csrf-protection-on-package-update"},{"cve":"CVE-2026-63002","cvss":4.8,"epss":0.0018,"slug":"cve-2026-63002-redaxo-stored-xss-in-mediapool-sync-page-via-unescaped-filenames","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in $diff","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.77+00:00","url":"https://junglewise.ai/threats/cve-2026-63002-redaxo-stored-xss-in-mediapool-sync-page-via-unescaped-filenames"},{"cve":"CVE-2026-63001","cvss":4.8,"epss":0.0018,"slug":"cve-2026-63001-redaxo-media-manager-stored-xss-in-type-name","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_manager/lib/media_ma","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.617+00:00","url":"https://junglewise.ai/threats/cve-2026-63001-redaxo-media-manager-stored-xss-in-type-name"},{"cve":"CVE-2026-62998","cvss":4.3,"epss":0.0027,"slug":"cve-2026-62998-redaxo-rex-list-unwhitelisted-order-by-column-injection","title":"REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.php accepts the sort","severity":"medium","exploited":false,"published_at":"2026-09-23T15:17:15.293+00:00","url":"https://junglewise.ai/threats/cve-2026-62998-redaxo-rex-list-unwhitelisted-order-by-column-injection"},{"cvss":2.1,"slug":"redaxo-reflected-xss-in-backend-packages-api-9ebf14f6","title":"REDAXO reflected XSS in backend packages API","severity":"low","exploited":false,"published_at":"2026-04-10T19:40:42+00:00","url":"https://junglewise.ai/threats/redaxo-reflected-xss-in-backend-packages-api-9ebf14f6"},{"cvss":2.1,"slug":"redaxo-cms-reflected-xss-in-backend-metainfo-api-7d05c138","title":"REDAXO CMS reflected XSS in backend Metainfo API","severity":"low","exploited":false,"published_at":"2026-04-10T19:40:23+00:00","url":"https://junglewise.ai/threats/redaxo-cms-reflected-xss-in-backend-metainfo-api-7d05c138"}],"generated_at":"2026-09-26T19:07:00.176898+00:00"}