Approved changes feed: RSS · Atom

cpe:2.3:a:redaxo:redaxo:5.15.1:*:*:*:*:*:*:*

part: a version: 5.15.1 update: *

VendorRedaxo (55e996e3-1e52-526e-83f0-0dbea860be57)
ProductRedaxo (665ff0a2-67a3-5125-a871-831838755f95)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/redaxo/redaxo purl2cpe 2026-06-01 10:15:48.800522

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25301 vulnerable 2026-06-08 06:31:22.754404 Details available
Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php.
Published: 2024-02-14T00:00:00.000Z
Updated: 2025-05-12T15:16:05.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25300 vulnerable 2026-06-08 06:31:22.753899 Details available
A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section.
Published: 2024-02-14T00:00:00.000Z
Updated: 2025-03-13T16:29:04.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25298 vulnerable 2026-06-08 06:31:22.753177 Details available
An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php.
Published: 2024-02-17T00:00:00.000Z
Updated: 2024-08-29T18:04:00.756Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.