HA
Product
Haxcms-php
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 5Low 0
Watch
Add Haxcms-php to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32028 | 9.9 | Apr 8 | HAX CMS PHP allows Insecure File Upload to Lead to Remote Code Execution Affected: 9.0.0 before 10.0.3 |
| CVE-2025-49141 | 8.8 | Jun 9 | HaxCMS-PHP Command Injection Vulnerability Affected: before 11.0.0 |
| CVE-2025-54378 | 8.3 | Jul 26 | HAX CMS Backend Lacks Comprehensive Authorization Checks Affected: before 11.0.9 |
| CVE-2025-53642 | 6.5 | Jul 11 | haxcms-nodejs and haxcms-php Improperly Terminate Sessions Affected: before 11.0.6 |
| CVE-2025-49139 | 6.5 | Jun 9 | @haxtheweb/haxcms-nodejs Iframe Phishing vulnerability Affected: before 11.0.0 |
| CVE-2025-49138 | 6.5 | Jun 9 | HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter Affected: before 11.0.0 |
| CVE-2025-54139 | 6.1 | Jul 22 | HAX CMS' application pages are vulnerable to clickjacking Affected: 11.0.0 before 11.0.8 |
| CVE-2025-49137 | 6.1 | Jun 9 | Hax CMS Stored Cross-Site Scripting vulnerability Affected: before 11.0.0 |
Showing 8