HIGH8.5Packagist
GHSA-2vc4-3hx7-v7v7· CVE-2025-49137Hax CMS Stored Cross-Site Scripting vulnerability
Modified: 9/10/2026
package
pkg:packagist/elmsln/haxcms
Hax CMS Stored Cross-Site Scripting vulnerability
Modified: 9/10/2026
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
Modified: 9/10/2026
HAX CMS application pages vulnerable to clickjacking
Modified: 9/10/2026
HAX CMS API Lacks Authorization Checks
Modified: 9/10/2026