Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-wj2a-1yb5-tyde
Vulnerability ID VCID-wj2a-1yb5-tyde
Aliases CVE-2025-64050
GHSA-xj9j-gjxg-7jvq
Summary A Remote Code Execution (RCE) vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages using the compromised template.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00582 https://api.first.org/data/v1/epss?cve=CVE-2025-64050
epss 0.00582 https://api.first.org/data/v1/epss?cve=CVE-2025-64050
cvssv3.1 7.2 https://drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing
generic_textual HIGH https://drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing
ssvc Track* https://drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-xj9j-gjxg-7jvq
cvssv3.1 7.2 https://github.com/redaxo/redaxo
generic_textual HIGH https://github.com/redaxo/redaxo
ssvc Track* https://github.com/redaxo/redaxo
cvssv3.1 7.2 https://github.com/redaxo/redaxo/pull/6372/commits/bc96462e20f7e651b2e6c3bb59d141d5cb09af0f
generic_textual HIGH https://github.com/redaxo/redaxo/pull/6372/commits/bc96462e20f7e651b2e6c3bb59d141d5cb09af0f
cvssv3.1 7.2 https://github.com/vettrivel007/CVE-Disclosures/blob/main/CVE-2025-64050.md
generic_textual HIGH https://github.com/vettrivel007/CVE-Disclosures/blob/main/CVE-2025-64050.md
ssvc Track* https://github.com/vettrivel007/CVE-Disclosures/blob/main/CVE-2025-64050.md
cvssv3.1 7.2 https://nvd.nist.gov/vuln/detail/CVE-2025-64050
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-64050
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2025-64050
https://github.com/redaxo/redaxo/pull/6372/commits/bc96462e20f7e651b2e6c3bb59d141d5cb09af0f
1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing https://drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing
CVE-2025-64050 https://nvd.nist.gov/vuln/detail/CVE-2025-64050
CVE-2025-64050.md https://github.com/vettrivel007/CVE-Disclosures/blob/main/CVE-2025-64050.md
GHSA-xj9j-gjxg-7jvq https://github.com/advisories/GHSA-xj9j-gjxg-7jvq
redaxo https://github.com/redaxo/redaxo
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-11-25T15:49:38Z/ Found at https://drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/redaxo/redaxo
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-11-25T15:49:38Z/ Found at https://github.com/redaxo/redaxo
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/redaxo/redaxo/pull/6372/commits/bc96462e20f7e651b2e6c3bb59d141d5cb09af0f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/vettrivel007/CVE-Disclosures/blob/main/CVE-2025-64050.md
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-11-25T15:49:38Z/ Found at https://github.com/vettrivel007/CVE-Disclosures/blob/main/CVE-2025-64050.md
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-64050
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.69417
EPSS Score 0.00582
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:57:29.699569+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2025/64xxx/CVE-2025-64050.json 38.6.0