TI-2025-32222 CVE-2025-50692 · GHSA-hrv3-vq6h-xw3f
FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
Priority HIGH 82
FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
Foxcms
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Foxcms records in CISA KEVNo Foxcms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records
TI-2025-19143 CVE-2025-25790 · GHSA-cj6v-75jc-4vmf
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of…
Priority HIGH 82
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file.
TI-2025-19142 CVE-2025-25789 · GHSA-27jp-f6mj-xr9q
FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via…
Priority HIGH 82
FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php.
TI-2025-21034 CVE-2025-29306 · GHSA-8gwj-x84v-j8cc
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the…
Priority HIGH 79
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
TI-2025-35007 CVE-2025-55422 · GHSA-rp83-qhwv-g23g
In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.
Priority HIGH 73
In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.
TI-2025-35006 CVE-2025-55420 · GHSA-x4w6-26rw-r6h9
A Reflected Cross Site Scripting (XSS) vulnerability was found in /index.php in FoxCMS…
Priority HIGH 73
A Reflected Cross Site Scripting (XSS) vulnerability was found in /index.php in FoxCMS v1.2.6.
TI-2025-35005 CVE-2025-55409 · GHSA-m3xp-hxfm-4pgm
FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article.
Priority HIGH 73
FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article.
TI-2025-09410 CVE-2025-10251 · GHSA-pqcq-j2x4-749q
FoxCMS Images.php batchCope sql injection
Priority MEDIUM 57
A vulnerability was detected in FoxCMS up to 1.24.
TI-2025-04624 CVE-2025-5155 · GHSA-8pj5-84fx-c3xh
qianfox FoxCMS Article.php batchCope sql injection
Priority MEDIUM 57
A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical.
TI-2025-11837 CVE-2025-12920 · GHSA-x22m-wwr6-j767
qianfox FoxCMS Product.php edit cross site scripting
Priority MEDIUM 55
A flaw has been found in qianfox FoxCMS up to 1.2.16.
TI-2025-28952 CVE-2025-46154 · GHSA-444c-5p4x-4xgr
Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.
Priority LOW 38
Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.
TI-2025-35386 CVE-2025-56630 · GHSA-q2jr-xg6p-fr64
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in…
Priority LOW 37
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.
TI-2025-21008 CVE-2025-29181 · GHSA-2pq8-4rf3-3vh9
FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.
Priority LOW 34
FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.
TI-2025-21007 CVE-2025-29180 · GHSA-q8hq-xhpc-vm95
In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection…
Priority LOW 34
In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability.
TI-2025-35345 CVE-2025-56435 · GHSA-9635-9v45-wjwc
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to…
Priority LOW 26
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the.