What is GHSA-m5vv-7jxc-8p6x?

GHSA-m5vv-7jxc-8p6x is a security advisory published by GitHub Security Advisories with Medium severity. Redaxo Core CMS Cross Site Scripting (XSS)

Which CVE IDs does GHSA-m5vv-7jxc-8p6x cover?

GHSA-m5vv-7jxc-8p6x covers the following CVE IDs: CVE-2024-50803. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-m5vv-7jxc-8p6x?

GHSA-m5vv-7jxc-8p6x affects 1 product, including: composer/redaxo/source:\u003c 5.18.0.

GHSA-m5vv-7jxc-8p6xMedium

Redaxo Core CMS Cross Site Scripting (XSS)

Vendor

GitHub Security Advisories

Published

November 19, 2024

Last Modified

June 14, 2025

🔗 CVE IDs covered (1)

CVE-2024-50803 →

📋 Description

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges.

🎯 Affected products1

composer/redaxo/source:< 5.18.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-50803
https://github.com/Praison001/CVE-2024-50803-Redaxo
https://medium.com/@praison66/redaxo-cve-2024-50803-5d15a3cd054d
http://redaxo.com
https://github.com/advisories/GHSA-m5vv-7jxc-8p6x