VYPR

Media Manager addon

by Redaxo

CVEs (1)

  • CVE-2026-63001MedSep 23, 2026
    risk 0.24cvss 4.8epss

    REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_manager/lib/media_manager.php inserts a Media Manager type name into raw backend warning HTML without escaping it when invoked through MEDIA_IS_IN_USE. An…