CVE-2025-29181

FOXCMS versions prior to V1.25 are vulnerable to SQL Injection due to a lack of validation on external input for the $param['title'] parameter in the /admin/util/Field.php file. An attacker can exploit this vulnerability to execute illegal SQL commands and steal sensitive database data . As of th...