CVE-2026-117538 | REDAXO up to 5.20.x Backend Packages API cross site scripting

October 27, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in REDAXO up to 5.20.x. This vulnerability affects unknown code of the component Backend Packages API. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-117538. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More