GraySignal/CVE-2024-50803-Redaxo

PoC

Stored XSS in mediapool feature of Redaxo

view exploit source poc_in_githubauthor GraySignalpublished 2024-11-15catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-50803US	—	0.58% (48th)	Exploit	2024-11-19
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.