Login Request a demo
PS
Vendor
Psu
3 products with CVEs on record
21
CVEs
0
On KEV
0
New 30D
Products
HA
Haxcms-nodejs
Psu
9.8
11 CVEs0 on KEV0 new
HA
Haxcms-php
Psu
9.9
8 CVEs0 on KEV0 new
HA
Haxiam
Psu
7.5
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-35185
HA
Haxiam
Psu
7.5
0%
Apr 6HAX CMS's public /server-status endpoint exposes authentication tokens, user activity, and client IP addresses
CVE-2026-22704
HA
Haxcms-nodejs
Psu
5.4
1%
Jan 10HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
CVE-2025-54378
HA
Haxcms-nodejs
Psu
8.3
1%
Jul 26HAX CMS Backend Lacks Comprehensive Authorization Checks
CVE-2025-54139
HA
Haxcms-nodejs
Psu
6.1
0%
Jul 22HAX CMS' application pages are vulnerable to clickjacking
CVE-2025-54137
HA
Haxcms-nodejs
Psu
7.3
0%
Jul 22NodeJS version of the HAX CMS application is distributed with Default Secrets
CVE-2025-54134
HA
Haxcms-nodejs
Psu
6.5
0%
Jul 21HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service
CVE-2025-54129
HA
Haxiam
Psu
4.3
0%
Jul 21HAXiam allows for User Enumeration
CVE-2025-54128
HA
Haxcms-nodejs
Psu
6.1
0%
Jul 21HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scripting
CVE-2025-54127
HA
Haxcms-nodejs
Psu
9.8
0%
Jul 21HAXcms's Insecure Default Configuration Leads to Unauthenticated Access
CVE-2025-53642
HA
Haxcms-nodejs
Psu
6.5
0%
Jul 11haxcms-nodejs and haxcms-php Improperly Terminate Sessions
CVE-2025-49141
HA
Haxcms-nodejs
Psu
8.8
1%
Jun 9HaxCMS-PHP Command Injection Vulnerability
CVE-2025-49139
HA
Haxcms-nodejs
Psu
6.5
0%
Jun 9@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability
CVE-2025-49138
HA
Haxcms-php
Psu
6.5
1%
Jun 9HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
CVE-2025-49137
HA
Haxcms-nodejs
Psu
6.1
0%
Jun 9Hax CMS Stored Cross-Site Scripting vulnerability
CVE-2025-32028
HA
Haxcms-php
Psu
9.9
2%
Apr 8HAX CMS PHP allows Insecure File Upload to Lead to Remote Code Execution