CERT24CVE-2026-116900 — Stored XSS via Media and Link Input Widgets in REDAXO before 5.21.4Loading data…
CERT24Threat Observatory
Period

CVE-2026-116900 — Stored XSS via Media and Link Input Widgets in REDAXO before 5.21.4

REDAXO versions before 5.21.4 contain a stored cross-site scripting (XSS) vulnerability that allows content editors to store unescaped HTML through the media, medialist, link, and linklist widgets.

← Back to intelligence

CVE-2026-116900 — Stored XSS via Media and Link Input Widgets in REDAXO before 5.21.4

REDAXO versions before 5.21.4 contain a stored cross-site scripting (XSS) vulnerability that allows content editors to store unescaped HTML through the media, medialist, link, and linklist widgets.