Redaxo CMS Cross-Site Scripting Vulnerability in Structure Management Page

A cross-site scripting (XSS) vulnerability has been identified in Redaxo CMS version 5.18.1. The issue arises in the Structure Management Page, specifically within an unknown function of the file 'index.php'. The vulnerability is triggered by manipulating the 'Article Name' argument, allowing remote attackers to execute the XSS exploit. This vulnerability has been publicly disclosed, and the vendor was notified but did not respond.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.