CVE-2024-50803

MediumCVSS 5.4

Published: 19/11/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

40th percentile - higher than 40% of all known CVEs

Summary

The mediapool feature in Redaxo Core CMS version 5.17.1 is vulnerable to Cross-Site Scripting (XSS). A remote attacker can exploit this vulnerability to escalate privileges within the system.

Risk Assessment

The risk involves potential takeover of an administrator account or unauthorized actions in the CMS, which could compromise data integrity and confidentiality.

Recommendation

It is recommended to immediately update Redaxo Core CMS to the latest available version and apply input filters for data submitted to the mediapool feature.

Original NVD description (English source)

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges