CVE-2025-55409

FoxCMS version 1.2.6 is affected by a Cross-Site Scripting (XSS) vulnerability located in the /index.php/article endpoint. This flaw can lead to the execution of arbitrary code by an attacker. As a temporary remediation, it is recommended to restrict access to the /index.php/article endpoint unti...