@haxtheweb/haxcms-nodejs vulnerabilities (npm)
16 vulnerabilities.
-
@haxtheweb/haxcms-nodejsnpm HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpoint 8.7 High -
@haxtheweb/haxcms-nodejsnpm HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Request 6.5 Medium -
@haxtheweb/haxcms-nodejsnpm HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack 8.7 High -
@haxtheweb/haxcms-nodejsnpm HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover 9.3 Critical -
@haxtheweb/haxcms-nodejsnpm HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation 9.3 Critical -
@haxtheweb/haxcms-nodejsnpm HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft 9.3 Critical -
@haxtheweb/haxcms-nodejsnpm HAXcms createSite SSRF Enables Arbitrary File Read 7.1 High -
@haxtheweb/haxcms-nodejsnpm HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover 8.1 High -
@haxtheweb/haxcms-nodejsnpm HAX CMS Backend Lacks Comprehensive Authorization Checks 8.3 High -
@haxtheweb/haxcms-nodejsnpm HAX CMS' application pages are vulnerable to clickjacking 4.3 Medium -
@haxtheweb/haxcms-nodejsnpm NodeJS version of the HAX CMS application is distributed with Default Secrets 7.3 High -
@haxtheweb/haxcms-nodejsnpm HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service 7.1 High -
@haxtheweb/haxcms-nodejsnpm HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scripting 7.2 High -
@haxtheweb/haxcms-nodejsnpm HAXcms's Insecure Default Configuration Leads to Unauthenticated Access 9.3 Critical -
@haxtheweb/haxcms-nodejsnpm HaxCMS-PHP Command Injection Vulnerability 8.6 High -
@haxtheweb/haxcms-nodejsnpm @haxtheweb/haxcms-nodejs Iframe Phishing vulnerability 5.3 Medium