Haxcms-Nodejs
Haxtheweb · 9 CVEs
HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Request
Jun 5, 2026
haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0
Jun 5, 2026
HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft
Jun 5, 2026
HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover
Jun 5, 2026
HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack
Jun 5, 2026
HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation
Jun 5, 2026
HAXcms createSite SSRF Enables Arbitrary File Read
Jun 5, 2026
Authenticated Remote Code Execution via File Overwrite
Jun 5, 2026
HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpoint
May 29, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-46357 | HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Request | MEDIUM | 0.41% | Jun 5, 2026 |
| CVE-2026-46397 | haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0 | MEDIUM | 0.42% | Jun 5, 2026 |
| CVE-2026-46496 | HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft | CRITICAL | 0.39% | Jun 5, 2026 |
| CVE-2026-46396 | HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover | CRITICAL | 0.39% | Jun 5, 2026 |
| CVE-2026-46511 | HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack | HIGH | 0.48% | Jun 5, 2026 |
| CVE-2026-46395 | HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation | CRITICAL | 0.29% | Jun 5, 2026 |
| CVE-2026-46393 | HAXcms createSite SSRF Enables Arbitrary File Read | HIGH | 0.38% | Jun 5, 2026 |
| CVE-2026-46399 | Authenticated Remote Code Execution via File Overwrite | CRITICAL | 0.49% | Jun 5, 2026 |
| CVE-2026-48527 | HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpoint | HIGH | 0.37% | May 29, 2026 |
Showing 1 to 9 of 9 CVEs