CVE-2025-55409 - FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article

HIGH

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article

Published Aug 25, 2025

8.8

HIGH

CVSS 3.1

EPSS 0.49%

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25707		Advisory
https://www.notion.so/CVE-2025-55409-2222b2fd0210804facb7cfe5d9db1ebd		ExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 25, 2025

Updated Jul 5, 2026

Reserved Aug 13, 2025

CISA Vulnrichment

Updated Aug 25, 2025

NVD

Status Modified

Modified Jul 5, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 25, 2025

Updated Jul 5, 2026

GitHub

No data