Haxcms-nodejs vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

HA

Product

Haxcms-nodejs

by Psu · last CVE Jan 10, 2026

11

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 3Medium 7Low 0

Severity

All severities11 Critical1 High3 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Haxcms-nodejs to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-54134	6.5	0%	Jul 21	HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service Affected: before 11.0.9
CVE-2025-53642	6.5	0%	Jul 11	haxcms-nodejs and haxcms-php Improperly Terminate Sessions Affected: before 11.0.6
CVE-2025-49139	6.5	0%	Jun 9	@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability Affected: before 11.0.0
CVE-2025-54139	6.1	0%	Jul 22	HAX CMS' application pages are vulnerable to clickjacking Affected: 11.0.6 before 11.0.13
CVE-2025-54128	6.1	0%	Jul 21	HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scripting Affected: before 11.0.8
CVE-2025-49137	6.1	0%	Jun 9	Hax CMS Stored Cross-Site Scripting vulnerability Affected: before 11.0.0
CVE-2026-22704	5.4	1%	Jan 10	HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover Affected: 11.0.6