What’s Vulnerable › Vulnerabilities

CVE-2021-39459

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-09 · updated 2026-06-17
• Weakness: CWE-78

Description

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.

Affected products

• redaxo: 5.12.1

References

• https://github.com/evildrummer/CVE-2021-XYZ
• https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39459
• https://github.com/evildrummer/CVE-2021-XYZ
• https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39459

Get alerted when CVE-2021-39459 or the next vulnerability affects your stack