VULNERABILITY INTELLIGENCE

CVE-2025-27412

CVSS score6.1 MEDIUM

EPSS probability0.29%

CISA KEVNot currently listed

Published2025-03-05

Last modified2026-06-17

Description

REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting (XSS) on the page of AddOns. This vulnerability is fixed in 5.18.3.