agentprime: redaxo-coreEvery new CVE for redaxo-core.https://agentprime.io/CVE-2026-117536: REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-117536/https://agentprime.io/advisories/CVE-2026-117536/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:31 GMTCVECVE-2026-117535: REDAXO before 5.21.3 Reflected XSS via opener_link in Media Poolhttps://agentprime.io/advisories/CVE-2026-117535/https://agentprime.io/advisories/CVE-2026-117535/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:30 GMTCVECVE-2026-117534: REDAXO before 5.21.3 CSRF in Article History Pluginhttps://agentprime.io/advisories/CVE-2026-117534/https://agentprime.io/advisories/CVE-2026-117534/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:30 GMTCVECVE-2026-117533: REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploadshttps://agentprime.io/advisories/CVE-2026-117533/https://agentprime.io/advisories/CVE-2026-117533/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:29 GMTCVECVE-2026-117532: REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Pluginhttps://agentprime.io/advisories/CVE-2026-117532/https://agentprime.io/advisories/CVE-2026-117532/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:28 GMTCVEcriticalCVE-2026-116900: REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgetshttps://agentprime.io/advisories/CVE-2026-116900/https://agentprime.io/advisories/CVE-2026-116900/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:28 GMTCVECVE-2026-116899: REDAXO before 5.21.4 Broken Access Control in Slice Operationshttps://agentprime.io/advisories/CVE-2026-116899/https://agentprime.io/advisories/CVE-2026-116899/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:27 GMTCVECVE-2026-116898: REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Movehttps://agentprime.io/advisories/CVE-2026-116898/https://agentprime.io/advisories/CVE-2026-116898/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:26 GMTCVECVE-2026-116897: REDAXO before 5.21.4 Missing Authorization in Version and History Previewshttps://agentprime.io/advisories/CVE-2026-116897/https://agentprime.io/advisories/CVE-2026-116897/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:26 GMTCVECVE-2026-116896: REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tableshttps://agentprime.io/advisories/CVE-2026-116896/https://agentprime.io/advisories/CVE-2026-116896/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:25 GMTCVECVE-2026-116895: REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameterhttps://agentprime.io/advisories/CVE-2026-116895/https://agentprime.io/advisories/CVE-2026-116895/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:24 GMTCVECVE-2026-116894: REDAXO before 5.21.5 Insufficient Session Expiration on Password Changehttps://agentprime.io/advisories/CVE-2026-116894/https://agentprime.io/advisories/CVE-2026-116894/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:24 GMTCVECVE-2026-116893: REDAXO core before 5.21.5 Missing Authorization in rex_api_package APIhttps://agentprime.io/advisories/CVE-2026-116893/https://agentprime.io/advisories/CVE-2026-116893/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:23 GMTCVE