Psu Haxcms-php vulnerabilities

• psu haxcms-nodejs, haxcms-php, haxtheweb issues +2 more HAX CMS Backend Lacks Comprehensive Authorization Checks CVE-2025-54378 Fix available 8.3 HighJuly 25, 2025
• psu haxcms-nodejs, haxcms-php, haxtheweb issues +2 more HAX CMS' application pages are vulnerable to clickjacking CVE-2025-54139 Fix available 4.3 MediumJuly 21, 2025
• haxtheweb issues, psu haxcms-nodejs, haxcms-php +2 more haxcms-nodejs and haxcms-php Improperly Terminate Sessions CVE-2025-53642 4.8 MediumJuly 11, 2025
• psu haxcms-php, haxtheweb issues, psu haxcms-nodejs +2 more HaxCMS-PHP Command Injection Vulnerability CVE-2025-49141 Fix available 8.6 HighJune 9, 2025
• psu haxcms-nodejs, haxtheweb issues, psu haxcms-php +2 more @haxtheweb/haxcms-nodejs Iframe Phishing vulnerability CVE-2025-49139 Fix available 5.3 MediumJune 9, 2025
• haxtheweb issues, psu haxcms-php +1 more HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter CVE-2025-49138 Fix available 6.5 MediumJune 9, 2025
• haxtheweb issues, psu haxcms-nodejs, haxcms-php +2 more Hax CMS Stored Cross-Site Scripting vulnerability CVE-2025-49137 Fix available 8.5 HighJune 9, 2025
• haxtheweb issues, psu haxcms-php +1 more HAX CMS PHP allows Insecure File Upload to Lead to Remote Code Execution CVE-2025-32028 10.0 CriticalApril 8, 2025