CVE-2026-117533 | REDAXO up to 5.21.2 SVG File rex_media_service cross site scripting

October 27, 2026 Yanac

A vulnerability was found in REDAXO up to 5.21.2. It has been rated as problematic. The affected element is the function rex_media_service of the component SVG File Handler. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-117533. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More