CVE-2026-116900 | Redaxo up to 5.21.3 Widgets input_media/input_link cross site scripting

October 27, 2026 Yanac

A vulnerability identified as problematic has been detected in Redaxo up to 5.21.3. This affects an unknown function of the component Widgets. Performing a manipulation of the argument input_media/input_link results in cross site scripting.

This vulnerability is cataloged as CVE-2026-116900. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More