HAX CMS PHP allows Insecure File Upload to Lead to Remote Code Execution

HAXcms's Insecure Default Configuration Leads to Unauthenticated Access

HaxCMS-PHP Command Injection Vulnerability

HAX CMS Backend Lacks Comprehensive Authorization Checks

NodeJS version of the HAX CMS application is distributed with Default Secrets

HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service

haxcms-nodejs and haxcms-php Improperly Terminate Sessions

@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability

HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter

HAX CMS' application pages are vulnerable to clickjacking

HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scripting

Hax CMS Stored Cross-Site Scripting vulnerability

HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover

HAX CMS PHP has Insufficient Session Expiration

Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint

HAXiam allows for User Enumeration