https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:46:13.482381+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261861 EUVD-2026-261861 2026-10-08T18:46:13.538428+00:00 EUVD-2026-261861 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64049 fkie_cve-2025-64049 2026-10-08T18:46:13.538483+00:00

A stored cross-site scripting (XSS) vulnerability in the module management component in REDAXO CMS 5.20.0 allows remote users to inject arbitrary web script or HTML via the Output code field in modules. The payload is executed when a user views or edits an article by adding slice that uses the compromised module.

 https://cve.radiocsirt.org/vuln/ghsa-vqc7-7fj4-3fm3 GHSA-vqc7-7fj4-3fm3 — REDAXO CMS is vulnerable to XSS through its module management component 2026-10-08T18:46:13.538529+00:00

Affected: Packagist: redaxo/source

A stored cross-site scripting (XSS) vulnerability in the module management component in REDAXO CMS 5.20.0 allows remote users to inject arbitrary web script or HTML via the Output code field in modules. The payload is executed when a user views or edits an article by adding slice that uses the compromised module.