CVE-2025-55422

The content management system FoxCMS version 1.2.6 is vulnerable to a reflected Cross Site Scripting (XSS) vulnerability located in the /index.php/plus endpoint. This flaw stems from the improper handling of input during web page generation, potentially allowing an attacker to execute malicious s...