Psu / Haxcms-PHP
8 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-54378 | HAX CMS Backend Lacks Comprehensive Authorization Checks | HIGH | 8.3 | Jul 26, 2025 |
| CVE-2025-54139 | HAX CMS' application pages are vulnerable to clickjacking | MEDIUM | 6.1 | Jul 22, 2025 |
| CVE-2025-53642 | haxcms-nodejs and haxcms-php Improperly Terminate Sessions | MEDIUM | 6.5 | Jul 11, 2025 |
| CVE-2025-49141 | HaxCMS-PHP Command Injection Vulnerability | HIGH | 8.8 | Jun 9, 2025 |
| CVE-2025-49139 | @haxtheweb/haxcms-nodejs Iframe Phishing vulnerability | MEDIUM | 6.5 | Jun 9, 2025 |
| CVE-2025-49138 | HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter | MEDIUM | 6.5 | Jun 9, 2025 |
| CVE-2025-49137 | Hax CMS Stored Cross-Site Scripting vulnerability | HIGH | 8.5 | Jun 9, 2025 |
| CVE-2025-32028 | HAX CMS PHP allows Insecure File Upload to Lead to Remote Code Execution | CRITICAL | 10.0 | Apr 8, 2025 |
Showing 1 to 8 of 8 CVEs