Threats tagged 'ghsa-34c3-hq82-r6qj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-116900REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML Medium5.12026-10-27GCVE DatabaseCVE-2026-116900 REDAXO versions before 5.21.4 have a stored cross-site scripting (XSS) vulnerability. This flaw allows content editors to inject malicious HTML by submitting crafted input values that are stored and later rendered without proper escaping in media-related widgets. Exploitation can lead to script execution in administrators' backend sessions, potentially hijacking their accounts. Report on CVE-2026-116900 Vulnerability CWE-79 #ghsa-34c3-hq82-r6qj	GCVE Database	2026-10-27

Page 1 of 1