CVE-2026-117537 | Redaxo up to 5.20.x metainfo_default_fields_create rex_view::message type cross site scripting

October 27, 2026 Yanac

A vulnerability classified as problematic was found in Redaxo up to 5.20.x. This affects the function rex_view::message of the component metainfo_default_fields_create. Such manipulation of the argument Type leads to cross site scripting.

This vulnerability is traded as CVE-2026-117537. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More