270 matches found
CVE-2025-12920: Improper Neutralization of Input During Web Page Generation
A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-11306
A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...
EUVD-2025-32473
A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...
CVE-2025-11306
A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...
CVE-2025-11306
A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...
CVE-2025-11306
FoxCMS (qianfox) up to version 1.2 contains a cross-site scripting flaw in the Search Page component, specifically in /index.php/Search where manipulation of the keyword parameter enables remote exploitation. Multiple sources (NVD, Red Hat, EUVD, CVE lists, and vendor/information aggregators) con...
CVE-2025-11306 qianfox FoxCMS Search cross site scripting
A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...
CVE-2025-11306: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...
FoxCMS 安全漏洞
FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS 1.2 and earlier versions, which stems from the incorrect operation of the parameter keyword in the file /index.php/Search, which may lead to a cross-site...
PT-2025-40822
Name of the Vulnerable Software and Affected Versions qianfox FoxCMS versions up to 1.2 Description A cross site scripting issue exists in the Search Page component of qianfox FoxCMS. The issue is located in the /index.php/Search file and involves manipulation of the keyword argument. The exploit...
EUVD-2025-23948
Malicious code in bioql PyPI...
EUVD-2025-28907
Malicious code in bioql PyPI...
EUVD-2025-13452
Malicious code in bioql PyPI...
EUVD-2025-5358
Malicious code in bioql PyPI...
EUVD-2025-15106
Malicious code in bioql PyPI...
EUVD-2025-18349
Malicious code in bioql PyPI...
EUVD-2024-51180
Malicious code in bioql PyPI...
EUVD-2024-51181
Malicious code in bioql PyPI...