Qianfox Foxcms vulnerabilities

• qianfox foxcms QianFox FoxCMS Admin.php edit password recovery CVE-2026-9609 5.1 MediumMay 27, 2026
• qianfox foxcms QianFox FoxCMS Administrator Backend edit cross site scripting CVE-2026-9608 4.8 MediumMay 27, 2026
• foxcms qianfox FoxCMS Product.php edit cross site scripting CVE-2025-12920 4.8 MediumNovember 9, 2025
• qianfox foxcms qianfox FoxCMS Search cross site scripting CVE-2025-11306 5.3 MediumOctober 5, 2025
• foxcms FoxCMS Images.php batchCope sql injection CVE-2025-10251 5.3 MediumSeptember 11, 2025
• qianfox foxcms qianfox FoxCMS Video.php batchCope sql injection CVE-2025-7568 5.3 MediumJuly 14, 2025
• qianfox foxcms An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2... CVE-2025-51650 5.6 MediumJuly 14, 2025
• qianfox foxcms qianfox FoxCMS Download.php batchCope sql injection CVE-2025-6094 5.3 MediumJune 15, 2025
• foxcms qianfox FoxCMS Article.php batchCope sql injection CVE-2025-5155 5.3 MediumMay 25, 2025
• qianfox foxcms foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand... CVE-2025-45240 6.5 MediumMay 5, 2025
• qianfox foxcms An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a... CVE-2025-45239 5.3 MediumMay 5, 2025
• qianfox foxcms foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the... CVE-2025-45238 9.1 CriticalMay 5, 2025
• qianfox foxcms FoxCMS improper authorization CVE-2025-2653 5.3 MediumMarch 23, 2025
• qianfox foxcms FoxCMS API Endpoint Site.php improper authorization CVE-2024-12901 6.9 MediumDecember 23, 2024
• qianfox foxcms FoxCMS Configuration File installdb.php code injection CVE-2024-12900 5.3 MediumDecember 23, 2024