CVE-2021-39459: Redaxo

High severity, CVSS 7.2. EPSS: 4.9% chance of exploitation in the next 30 days.

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.

Affected products

• Redaxo Redaxo: version 5.12.1 only

Published 2021-09-09. Last modified 2026-06-17.