📦 Haxcms Php

by Psu

🔍 What is Haxcms Php?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-49141

HIGH CVSS 8.5 Jun 9, 2025

CVE-2025-49141 is an OS command injection vulnerability in HAX CMS PHP's gitImportSite functionality. Authenticated attackers can execute arbitrary commands on the backend server by crafting malicious...

CVE-2025-54139

MEDIUM CVSS 4.3 Jul 23, 2025

HAX CMS versions 11.0.12 and below (NodeJS) and 11.0.7 and below (PHP) lack X-Frame-Options headers, allowing attackers to embed the CMS login page and other sensitive interfaces in iframes. This enab...

CVE-2025-53642

MEDIUM CVSS 4.8 Jul 11, 2025

This vulnerability in HAXcms backends fails to properly terminate user sessions during logout, allowing attackers to maintain access to authenticated sessions. It affects all users of haxcms-nodejs an...