cvedb.io
CVE-2021-39459
HIGH · CVSS 7.2
EPSS exploitation probability: 0%
Published 2021-09-09T12:15:09.980 · Last modified 2026-06-17T04:03:42.663

Summary

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.

Affected products

redaxo — redaxo

Does this affect you?

Add your gear to cvedb and we'll alert you only when redaxo ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.