| Title | Yakamara (Frankfurt am Main/Germany redaxo cms <=5.18.3 rce |
|---|
| Description | In Redaxo CMS, there is an XSS vulnerability in the template section. Users can create their own templates and insert PHP commands. Then, by creating an article that references the template, opening the article will display the command execution results. |
|---|
| Source | ⚠️ https://github.com/be2398/aaa/issues/1 |
|---|
| User | am1reux (UID 83481) |
|---|
| Submission | 03/29/2025 11:05 (2 years ago) |
|---|
| Moderation | 04/13/2025 19:36 (15 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 253882 [Redaxo 5.15.1 /pages/templates.php code injection] |
|---|
| Points | 0 |
|---|