
Security research repository detailing CVE-2024-46209 (authenticated RCE) and CVE-2024-46210 (stored XSS via file upload) in Redaxo CMS v5.17.1, with exploit descriptions and analysis.
Redaxo CMS v5.17.1 security research Completed at 09 August 2024
Contains detailed description of: CVE-2024-46210 - Stored Cross-Site Scripting via file Upload in MediaPool module CVE-2024-46209 - Authenticated arbitrary code execution.