CVE-2021-39459

7.2 highEPSS 4.9%

High (7.2) in redaxo redaxo. EPSS 4.9% chance of exploitation in the next 30 days.

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2021-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redaxo:redaxo

References

https://github.com/evildrummer/CVE-2021-XYZ
https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39459
https://github.com/evildrummer/CVE-2021-XYZ
https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39459

Check your stack JSON