Threats tagged 'ghsa-76pp-mqrq-h425'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.1	CVE-2026-117537REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to Low2.12026-10-27GCVE DatabaseCVE-2026-117537 REDAXO versions before 5.21.0 have a reflected cross-site scripting (XSS) vulnerability in the metainfo_default_fields_create API. Authenticated attackers can inject malicious scripts via the type parameter, which are rendered unescaped in the backend session. This allows script execution in the victim's backend context. Report on CVE-2026-117537 Vulnerability CWE-79 #ghsa-76pp-mqrq-h425	GCVE Database	2026-10-27

Page 1 of 1