Psu Haxcms-nodejs vulnerabilities

• haxtheweb issues, psu haxcms-nodejs +1 more HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover CVE-2026-22704 Public exploitFix available 8.1 HighJanuary 10, 2026
• psu haxcms-nodejs, haxcms-php, haxtheweb issues +2 more HAX CMS Backend Lacks Comprehensive Authorization Checks CVE-2025-54378 Fix available 8.3 HighJuly 25, 2025
• psu haxcms-nodejs, haxcms-php, haxtheweb issues +2 more HAX CMS' application pages are vulnerable to clickjacking CVE-2025-54139 Fix available 4.3 MediumJuly 21, 2025
• haxtheweb issues, psu haxcms-nodejs +1 more NodeJS version of the HAX CMS application is distributed with Default Secrets CVE-2025-54137 Fix available 7.3 HighJuly 21, 2025
• haxtheweb issues, psu haxcms-nodejs +1 more HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service CVE-2025-54134 Fix available 7.1 HighJuly 21, 2025
• haxtheweb issues, psu haxcms-nodejs +1 more HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scripting CVE-2025-54128 Fix available 7.2 HighJuly 21, 2025
• psu haxcms-nodejs, haxtheweb issues +1 more HAXcms's Insecure Default Configuration Leads to Unauthenticated Access CVE-2025-54127 Fix available 9.3 CriticalJuly 21, 2025
• haxtheweb issues, psu haxcms-nodejs, haxcms-php +2 more haxcms-nodejs and haxcms-php Improperly Terminate Sessions CVE-2025-53642 4.8 MediumJuly 11, 2025
• psu haxcms-php, haxtheweb issues, psu haxcms-nodejs +2 more HaxCMS-PHP Command Injection Vulnerability CVE-2025-49141 Fix available 8.6 HighJune 9, 2025
• psu haxcms-nodejs, haxtheweb issues, psu haxcms-php +2 more @haxtheweb/haxcms-nodejs Iframe Phishing vulnerability CVE-2025-49139 Fix available 5.3 MediumJune 9, 2025
• haxtheweb issues, psu haxcms-nodejs, haxcms-php +2 more Hax CMS Stored Cross-Site Scripting vulnerability CVE-2025-49137 Fix available 8.5 HighJune 9, 2025