CVE-2024-13209

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-13209
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13209.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-13209
Aliases
Published
2025-01-09T03:00:15Z
Modified
2026-08-22T03:49:34Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Redaxo CMS Structure Management Page index.php cross site scripting
Details

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the component Structure Management Page. The manipulation of the argument Article Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13209.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.18.1"
                },
                {
                    "last_affected": "5.18.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/redaxo/core

Affected ranges

Type
GIT
Repo
https://github.com/redaxo/core
Events
Introduced
ba896c8b9f44c1280c4421b01b8d8629cf9a08bd
Last Affected
ba896c8b9f44c1280c4421b01b8d8629cf9a08bd
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:redaxo:redaxo:5.18.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.18.1"
        },
        {
            "last_affected": "5.18.1"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

5.*
5.18.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13209.json"