elmsln/haxcms vulnerabilities (Packagist)

4 vulnerabilities.

• elmsln/haxcms Packagist HAX CMS Backend Lacks Comprehensive Authorization Checks CVE-2025-54378 Fix available 8.3 HighJuly 25, 2025
• elmsln/haxcms Packagist HAX CMS' application pages are vulnerable to clickjacking CVE-2025-54139 Fix available 4.3 MediumJuly 21, 2025
• elmsln/haxcms Packagist HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter CVE-2025-49138 Fix available 6.5 MediumJune 9, 2025
• elmsln/haxcms Packagist Hax CMS Stored Cross-Site Scripting vulnerability CVE-2025-49137 Fix available 8.5 HighJune 9, 2025