Skip to content
Foxcms vulnerabilities
Newest
-
foxcms
qianfox FoxCMS Product.php edit cross site scripting
CVE-2025-12920
4.8 Medium
-
foxcms
FoxCMS Images.php batchCope sql injection
CVE-2025-10251
5.3 Medium
-
foxcms
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app...
CVE-2025-56630
7.3 High
-
foxcms
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute...
CVE-2025-56435
5.3 Medium
-
foxcms
In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.
CVE-2025-55422
8.8 High
-
foxcms
FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows...
CVE-2025-55409
8.8 High
-
foxcms
A Reflected Cross Site Scripting (XSS) vulnerability was found in /index.php in FoxCMS v1.2.6....
CVE-2025-55420
8.8 High
-
foxcms
FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
CVE-2025-50692
9.8 Critical
-
foxcms
Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.
CVE-2025-46154
8.4 High
-
foxcms
qianfox FoxCMS Article.php batchCope sql injection
CVE-2025-5155
5.3 Medium
-
foxcms
FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.
CVE-2025-29181
7.2 High
-
foxcms
In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability....
CVE-2025-29180
7.2 High
-
foxcms
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case...
CVE-2025-29306
Public exploit
EPSS 47.2%
9.8 Critical
-
foxcms
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS...
CVE-2025-25790
9.8 Critical
-
foxcms
FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index...
CVE-2025-25789
9.8 Critical