CVE-2026-117536 - REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation
CVE ID :CVE-2026-117536 Published : Oct. 27, 2026, 11:17 a.m. | 1 hour, 6 minutes ago Description :REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/users) because the CSRF token check only runs when the save parameter is...