redaxo Vulnerabilities and Affected Products
Vulnerabilities associated with Redaxo CMS Mediapool.
Products
Clear product- redaxo7 vulnerabilities
- CMS1 vulnerability
- core1 vulnerability
- Redaxo CMS1 vulnerability
- Redaxo CMS Mediapool1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2018-25353HIGH | Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File UploadRedaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions. Attackers with editor accounts can upload executable files by using obfuscated extensions like php71 or php53 to evade the blacklist filter and execute arbitrary code. CWE-863May 23, 2026 | CVSS8.7v4.0 | EPSS0.452% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |