REDAXO
REDAXO 5.21.2 Fixes CSRF and Stored XSS Flaws
09/23/2026
REDAXO 5.21.2 fixes stored script injection in media-management paths and missing CSRF protection on addon updates. Back up the site, check addon compatibility, and review backend permissions; the flaws have different access and interaction requirements.