Back to Database
Status published
High
CVE-2021-39459
Remote code execution in the modules component in Yakamara Media...
Vulnerability Description
Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-39459
Credits & Attribution
No credits recorded in the NVD database.
References
More from redaxo
View All →CVE-2025-66026
REDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types]
Medium
6.1
CVE-2025-27412
REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation
Medium
6.1
CVE-2025-27411
REDAXO allows Arbitrary File Upload in the mediapool page
Medium
5.4
CVE-2021-39458
Triggering an error page of the import process in Yakamara...
Medium
6.5
CVE-2018-18200
There is a SQL injection in Benutzerverwaltung in REDAXO before...
Critical
9.8
Affected Vendor
redaxo
View all reports →Affected Software
redaxo
Vulnerable Versions:
5.12.1
Timeline
Official Publish:
September 9th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.