CVE-2024-25298: Redaxo

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php.

Affected products

• Redaxo Redaxo: version 5.15.1 only

Published 2024-02-17. Last modified 2026-06-17.