CVE-2025-29181

FOXCMS = V1.25 is vulnerable to SQL Injection via $param'title' in /admin/util/Field.php...

CVE-2025-29181

creationtimestamp| type| source ---|---|--- 2025-04-17 18:54:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqyoj7v2q 2025-04-17 20:30:14+00:00| seen| https://t.me/cvedetector/23244...

CVE-2025-29181

FOXCMS = V1.25 is vulnerable to SQL Injection via $param'title' in /admin/util/Field.php...

CVE-2025-29181

Summary of CVE-2025-29181 : FoxCMS is affected by a SQL Injection in the Field.php file, via the parameter $param['title'] in /admin/util/Field.php. Multiple sources indicate the issue exists in FoxCMS versions prior to or at V1.25, with the root cause being lack of input validation for the title...